Florida Tech Information Assurance Meeting: Static Code Analysis

MELBOURNE, FLA.—The Harris Institute for Assured Information at Florida Institute of Technology and the Space Coast Chapter of the Information Systems Security Association (ISSA) present a monthly lecture series on security trends and topics. This month’s meeting, which is free and open to the public, is scheduled for April 18, 2013 at 6:30 p.m. in the third-floor conference room of the Harris Center for Science and Engineering Building on the Florida Tech campus.

The Institute hosts Mark Fioravanti, former Security Architect for the Science and Technology Directorate of the Department of Homeland Security and currently a Computer Science PhD student at Florida Institute of Technology, on the topic of “Static Code Analysis for the Enterprise”. In this talk Mr. Fioravanti will discuss the following aspects of the topic; How to set up a security code review program to support customer requirements. Newer standards such as the Payment Card Industry-Data Security Standard (PCI-DSS) have mandatory static code analysis requirements and other standards are being released which optionally include these requirements. The presentation will provide an experience report on a Static Code analysis program that was developed and maintained for the Federal government.

Mark Fioravanti has been in information security for ten years. He has supported a number of different federal agencies including NASA and FBI.

While working as the Security Architect for the Science and Technology Directorate of the Department of Homeland Security he led the Static Code Analysis Team and the Security Test Team. He specializes in web application security and has contributed to the Common Weakness Enumeration (CWE)/SANS Top 25 Most Dangerous Software Errors. Mark Fioravanti is also a Mentor for the SANS Institute which he has taught mentored students in Hacker Techniques, Exploits and Incident Response.

For more information, contact Richard Ford at (321) 674-7473.