1. PII Updates
Cheng Tang U.S. Department of Education 2012 Software Developers Webinar #3

2. Agenda FSA Strategic Security Plans PII Update Software Security
Programming Security
Input Validation
References

3. FSA Strategic Security Plans
TFA
Identity Management
Logging and Alerting
Cloud

4. PII Update Keylogger trending downward Breaches trending upward
Privileged accounts being secured by TFA
Student accounts still using SSN/PIN

5. Software Security Common Application Vulnerabilities Input Validation
XSS, CSRF, SQL Injection
Hidden Variables
Cookie Forgery
Response Splitting
Parameter Manipulation

6. Programming Security Input Validation Basics
Client-side versus Server-side
Decode Input
Blacklist/Whitelist
Validation Input
Database Parameterization
Encode/Escaping Output

7. References Secure Application Coding Sans.org training
Sans.org training
Privacy Breaches

8. Contact Information
We appreciate your feedback and comments. Please contact me at:
Cheng Tang
Phone: (202)