Press Releases

Executive Presentations to Demonstrate Importance of Web Application Security

RSA Conference, SAN JOSE, CA — February 6,  2006 - Security Innovation, the independent authority on application security development and assessment, today announced that its executives will be presenting two sessions at RSA 2006 on application security and its place in software development. Director of Security Technology Herbert Thompson, Ph.D., and Professor James Whittaker of the Florida Institute of Technology, and founder of Security Innovation, will co-lead a presentation on “How to Break Software Security.” Dr. Thompson will also co-lead a talk on “Baking Security into the Development Life Cycle” with Michael Howard, senior security program manager of Microsoft Corporation.

Additionally, from February 13-16, Security Innovation will be partnering with RSA to present the “Interactive Testing Challenge,” the ultimate hands-on test of software security skills designed to help security professionals of varying skill levels assess their knowledge and experience in Web application security. The Challenge will provide hands-on exploration into the topics to be addressed in the company’s presentations. For more information, visit http://2006.rsaconference.com/us/agenda/special.aspx#itc

Security Innovation will also be exhibiting at Booth 2279 at the RSA show.

Having conducted security assessments for many of today’s largest software vendors, Security Innovation is uniquely positioned to comment on the vulnerabilities most often found in applications. In “How to Break Software Security,” Drs. Thompson and Whittaker will discuss how to locate weaknesses by forcing software applications to fail in ways that are exploitable by hackers. Dr. Thompson and Mr. Howard will then take a step back, offering guidance on how to preclude these weaknesses by “baking” security into the application during development. They will outline the patterns seen in insecure software and offer a software development roadmap which will steer organizations toward producing more secure applications.

Wednesday, February 15, 2006; 3:25 PM PT
Who: Director of Security Technology Herbert Thompson, Ph.D., Security Innovation Inc. and Professor James Whittaker, Florida Institute of Technology
What: “How to Break Software Security”
Where: RSA 2006, McEnery Convention Center, San Jose, Ballroom A1
URL: https://cm.rsaconference.com/US06/catalog/eventguide/publicSchedule.jsp

Thursday, February 16, 2002; 2:00 PM PT
Who: Director of Security Technology Herbert Thompson, Ph.D., Security Innovation Inc. and Senior Security Program Manager Michael Howard, Microsoft Corporation
What: “Baking Security into the Development Life Cycle”
Where: McEnery Convention Center, San Jose, Room B4
URL: https://cm.rsaconference.com/US06/catalog/eventguide/publicSchedule.jsp

“When a company discovers vulnerabilities in its software post-development, it is exponentially more expensive to fix the problem than it would have been to prevent flaws during development,” said Dr. Thompson. “To design, build, and deploy secure applications, organizations must integrate security into every facet of their application development life cycle. They must include specific security-related activities in their process from requirements gathering through deployment.”

About Security Innovation
Security Innovation is the authority on application security and leading independent provider of assessment and training services. Dozens of leading organizations, including Adobe, Cisco, Fidelity, Harris Corporation, IBM, ING, HP, Microsoft, VISA, SAP, Symantec, VeriSign and a number of government agencies, rely on Security Innovation’s expertise in application security testing and training to develop, evaluate and deploy more secure applications. More than 60 percent of the Company’s staff holds advanced degrees in computer science with 30 percent at the Ph.D. level. The Company is headquartered in Wilmington, Mass., with offices in Amsterdam, The Netherlands; Seattle, Wash.; and Melbourne, Fla. For more information about Security Innovation, visit www.securityinnovation.com or call +1.978.694.1008.

Contacts:
Davida Dinerman/Tom Bain
Schwartz Communications, Inc.
(781) 684-0770
sisecure@schwartz-pr.com