[Owasp-sanantonio] OWASP San Antonio October Meeting: Ensuring System Security Using Data Flow Analysis

Marlie Huizar marlie at denimgroup.com
Tue Oct 7 15:09:35 EDT 2008



OWASP June 2008 Header


Ensuring System Security Using Data Flow Analysis
Presented by Jeremy Price, Senior Research Engineer at Southwest
Research Institute (SwRI)

Ensuring computer system security using user defined policies is a
difficult problem.  One approach that is currently being researched is
the application of system-level data flow analysis to ensure malicious
code cannot infiltrate the system.  

The data flow analysis involved with ensuring system security needs two
levels of granularity: inter-process data flow analysis and
intra-process data flow analysis.  The University of Texas at Austin
Department of Computer Science has created a Dynamic Data Flow Analysis
(DDFA) tool that implements intra-process data flow analysis.  Purdue
University has created a Process Coloring (PC) system that implements
the inter-process data flow analysis.  Southwest Research Institute is
working with both universities to integrate the PC and DDFA technologies
to implement the system level data flow analysis solution.  This talk
will focus on technical details of the two different technologies and
will detail example security scenarios that can be solved using these



San Antonio Technology Center (Web Room)

3463 Magic Drive

San Antonio, TX 78229


Wednesday, October 22, 2008

11:30 a.m. - 1:00 p.m.


(Sodas and snacks will be provided. Attendees are free to bring a bag


Register Now <mailto:owasprsvp at denimgroup.com> 

About the Speaker, Jeremy Price:

Jeremy Price is a Senior Research Engineer at Southwest Research
Institute (SwRI).  During his nine year tenure at SwRI, Mr. Price has
worked on projects as varied as embedded systems, video compression,
network data acquisition, and software defined radios.  Most recently,
Mr. Price has been leading a research effort funded by the Intelligence
Advanced Research Projects Activity (IARPA) that focuses on system-level
data flow analysis for the purpose of securing computer systems.  Mr.
Price's real love in the realm of computer engineering is getting his
hands dirty working with the digital bits at the embedded system level.

Sponsored by:

Denim Group Logo

OWASP - San Antonio Chapter



Forward email

Safe Unsubscribe

This email was sent to marlie at denimgroup.com by dan at denimgroup.com.

Update Profile/Email Address
>  | Instant removal with SafeUnsubscribe
> (tm) | Privacy Policy
<http://ui.constantcontact.com/roving/CCPrivacyPolicy.jsp> .

Email Marketing <http://www.constantcontact.com/index.jsp?cc=events01>


OWASP San Antonio c/o Denim Group | 3463 Magic Drive | Suite 315 | San
Antonio | TX | 78229


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-sanantonio/attachments/20081007/d67b2c1c/attachment.html 

More information about the Owasp-sanantonio mailing list