Thursday, July 17, 2008

What would you like to see in a Security Awareness Seminar?

I'm beginning to work on materials for a Security Awareness Seminar to compliment my Privacy Awareness Seminar. My target audience consists of developers, architects, testers, project managers, and development managers. I'm looking for ideas on what might interest an audience like this, and could fit into a period of 4 hours, since I know that development teams are always crushed for time.

Some thoughts that I had were to possibly focus on the OWASP Top 10, which includes topics like XSS, and SQL Injection. I don't think we would have the time to go into depth on Secure Coding Techniques, that is probably best handled by a text like Michael Howard's Writing Secure Code, Second Edition.

No comments: