Security Principles Versus the Real World

Moderator: Gary McGraw, Chief Technology Officer, Cigital Panelists: Eugene Spafford, Executive Director of the Center for Education and Research in Information Assurance and Security (CERIAS) and Computer Sciences Professor, Purdue University Jim Routh, CISO, Aetna Keith Gordon,Information Security & Risk Mgmt Exec, Capital One Marcus Ranum, Chief Security Officer, Tenable Years ago, Saltzer and Schroeder identified a set of security principles meant to guide security design. Today, with computer security more important than ever, the question at hand is how these principles align with the real world (or don't). This panel pits academia (Matt Bishop) and security gurus (Marcus Ranum) against the real world CISOs from Aetna and Visa in a knockdown drag out fight.