Download to read offline
Uploaded byRashid Khatmey
4 . future uni presentation
Security is everyone's responsibility. The document discusses secure software development lifecycles (SSDLC), social media security, and information security ethics. It promotes building security into every phase of the software development process from planning through deployment. It emphasizes using strong, unique passwords for all accounts, enabling privacy settings, and being wary of suspicious links and potential scams on social media. The document also outlines a code of ethics for information security professionals, including contributing to society, avoiding harm, being honest, respecting privacy and intellectual property, and knowing and following relevant laws.
More Related Content
Similar to 4 . future uni presentation
4 . future uni presentation
- 1. Security is everyone’sresponsibility By Omer Mohamed Abalraheem yassin Electronic Banking Services Co.
- 2.
- 3. Omer M. Yassin LCCSA(Lucideus Certified Cyber Security Analyst) Lucideus , India About Me: 02 B.Sc. Electrical and electronic engineering Majored in software and electronics systems UofKTeaching assented for information security course UofK Information security specialist EBS Fb/oyessin Omar.m.yassin@outlook.com Contacts
- 4. We are currentlynot planning on conquering the world. – Sergey Brin Mission 03 What are we going to talk about ?. • Secure Software development life cycle (S-SDLC). • Social media security. • Information security ethics.
- 5. Put a relevantsubtitle in this line about your businessSecure Software Development life cycle A Software Development Life Cycle (SDLC) is a framework that defines the process used by organizations to build an application from its inception to its decommission What is SDLC ? SDLC phases : • Planning and requirements • Architecture and design • Test planning • Coding • Testing and results • Release and maintenance requirements Design CodingTesting Deployment
- 6. There SDLC, Whydo I need SSDLC ?? This Fire Fighting approach wont work any longer ! • More secure software as security is a continuous concern • Awareness of security considerations by stakeholders • Early detection of flaws in the system • Cost reduction as a result of early detection and resolution of issues • Overall reduction of intrinsic business risks for the organization Advantages of pursuing an SSDLC approach 06
- 7. How does itwork? 07 Include security in EVERY THING !!!
- 8. How Dose itlook like ? Better isn’t it ?!! 08
- 9. Will this everwork ? YES IT WOULD !! Many SSDLC models have been proposed. Here are a few of them: •MS Security Development Lifecycle (MS SDL) •NIST 800-64 •OWASP CLASP (Comprehensive, Lightweight Application Security Process) •Cigital’s Security Touchpoints 09
- 10. How Do IGet Started? Education Code Tools Advise Nothing Starts perfect … work your way to it 10
- 11. Do I reallyneed to worry about that ? I have Nothing its only my PC Why Would a hacker hack me really ? Yes, You Actually Are A Target !
- 12. You Can easilybe one of those Check :: https://norse-corp.com
- 13. Why are youa target ? Automation No one is excluded Easy Peasy Tools free and available Why not try it . 13
- 14. Key recommendations Uses theseand develop your own. Your self Use common sense it’s the best defense Updating Make sure that your computer or mobile device is always up to date Passwords Use Strong password and unique for each account Credit cards Check your financial statement more often Network Use passwords to protect your home/work network 5 Important Keys 1 2 3 4 5 14
- 15. How about watchingthis cool video Not cute cats something even more fun It’s time for a break
- 17. Social MediaWe alluse it , why not making it more secure !
- 18. Privacy. • impacting YourFuture • Attacks Against You • Accidently Harming Your Employer/university
- 19. Security Simple Protect each ofyour accounts with a strong, unique password and do not share them with anyone else. Login If you do use privacy settings, make sure you review and test them regularly. Privacy Settings
- 20. Be suspicious ofemails that claim to come from social media sites. Malicious Links/Scams: Be cautious of suspicious links or potential scams posted on social media sites. Email Social media sites use encryption called HTTPS to secure your online connections to the site. Encryption
- 21. Most social mediasites provide mobile apps to access your online accounts. Make sure you download these mobile apps from a trusted site and that your smartphone is protected with a strong password Secure Mobile Apps
- 22. Information security ethics. Ethicsis doing the right thing, even when no one is looking 22
- 23. We are notall bad , some of us are good people too. There is a fine line between the ‘hats’ and the distinction often becomes blurred. Often a matter of perspective.
- 24. Code of ethics •Contribute to society and human well-being • Avoid harm to others • Be honest and trustworthy • Be fair and take action not to discriminate • Honor property rights including copyrights and patents • Give proper credit for intellectual property • Respect the privacy of others • Honor confidentiality • Know and respect existing laws pertaining to professional work. • Improve public understanding of computing and its consequences. • Access computing and communication resources only when authorized to do so
- 25. Final tips? Knowledge is poweruse it wisely 25 Security is common sense Really !! Stay informant
- 26. EBS – Electronicbanking services Get in Touch Location Central Bank Of Sudan Khartoum +249 183 740 840 +249 183 790 864 info@ebs-sd.com 56
- 27. You are yourown Information security adviser Thanks for having us Enjoy your day !
Editor's Notes
- #5 What is it that we are going to talk about today. Well like a wise man once said we aren’t planning on conquring the world right now .;. We will someday but for now we are going to stick to these topics. Me coming from both a software and security back ground I choose to talk about the secure software development life cycle because of its importan in todays buniss and we are going to ebefre talk about gernal thing we shoud keep in our mind when using social media how to stay secure presove our privcey and finaly will go over some ethic an information security people have or at least know,/…
- #10 1- One of the first of its kind, the MS SDL was proposed by Microsoft in association with the phases of a classic SDLC. 2- Provides security considerations within the SDLC. Standards were developed by the National Institute of Standards and Technology to be observed by US federal agencies. 3- Simple to implement and based on the MS SDL. It also maps the security activities to roles in an organization. 4- Proposed by Gary McGraw in Building Security In. These touchpoints, as seen below, present an artifact-centric approach (designed to operate on documents, diagrams, code, etc.) rather than a process-centric approach. This, in turn makes the security analysis SDLC model agnostic.
- #16 Refer to link in tips