Building Security into the Software Development Lifecycle

Window Snyder, Chief Security Officer, Mozilla
Thursday, October 30, 2008

Abstract

In order to create software that is able to withstand the threats you know about today and the threats you'll face in the future, security must be considered at every step of the development process. Join Window Snyder as she explains how Mozilla works to secure Firefox and how you can apply these techniques to any software project. Topics include threat modeling, security response, security metrics, and more.

Bio

Window Snyder is Chief Security Something-or-Other at Mozilla Corporation.

Prior to joining Mozilla, Ms. Snyder was a principal, founder, and core team member at Matasano, a security services and product company based in New York City and a senior security strategist at Microsoft in the Security Engineering and Communications organization. At Microsoft she managed the relationships between security consulting companies and the Microsoft product teams and the outreach strategy for security vendors and security researchers. Previously she was responsible for security sign-off for Windows XP SP2 and Windows Server 2003.

Ms. Snyder was Director of Security Architecture at @stake. She developed application security analysis methodologies and led the Application Security Center of Excellence. She was a software engineer for 5 years focused primarily on security applications, most recently at Axent Technologies, now Symantec.

Ms. Snyder is co-author of Threat Modeling, a manual for security architecture analysis in software.

Mozilla CSO Visits ISTS