What Is Cybersecurity Engineering and Why Do I Need It?
When systems were predominately hardware-based, components were built to specification. Systems engineers defined and verified component functions and interfaces that together provided total system capability. Today, system capability is largely supplied through software components and network connectivity. This increases the system’s flexibility and adaptability—and its cyber risk! Software components are specified loosely, if at all, and are often assembled from an opaque mix of modified legacy components, commercial off-the-shelf (COTS) applications and services, and open source libraries downloaded from the Internet. This greatly increases the cyber-attack surface. Using cybersecurity engineering knowledge, methods, and tools throughout the lifecycle of software-intensive systems will reduce their inherent cyber risk and increase their operational cyber resilience.
What attendees will learn:
- Cybersecurity engineering consolidates the tools and analyses used in various lifecycle steps to ensure effective operational results.
- Cybersecurity engineering builds upon data that is scattered across lifecycle activities and products to identify gaps and potential mission impacts.
- The Software Engineering Institute’s Cybersecurity Engineering and Software Assurance Professional Certificate Program enables participants to understand, identify, and manage cybersecurity risks in developing or acquiring software-reliant systems through activities such as threat modeling, security engineering risk analysis, and supply chain risk assessment.
Who should attend?
Anyone interested in learning about cybersecurity risk for software-reliant systems, including
- Systems engineers
- Software engineers
- Program managers (acquisition and engineering)
Speaker and Presenter Information
Dr. Carol Woody is a principal researcher for the CERT Division of the Software Engineering Institute at Carnegie Mellon University. Her research focuses on building capabilities and competencies for measuring, managing, and sustaining cybersecurity for highly complex networked systems and systems of systems, and she has successfully implemented technology solutions for such diverse domains as defense, government, banking, mining, manufacturing and finance. She co-authored the book Cyber Security Engineering: A Practical Approach for Systems and Software Assurance, which is published by Pearson Education as part of the SEI Series in Software Engineering.
Rita Creel is Acting Deputy Director for the CERT Division of the Software Engineering Institute at Carnegie Mellon University. She has over 25 years of experience in software-intensive systems engineering and acquisition, cybersecurity, and systems and software measurement and analysis.
Relevant Government Agencies
Air Force, Army, DOD & Military, Dept of Energy, Dept of Health & Human Services, Dept of Homeland Security, Dept of Treasury, Dept of Veterans Affairs
Event Type
On-Demand Webcast
This event has no exhibitor/sponsor opportunities
Cost
Complimentary: $ 0.00
Website
Click here to visit event website
Organizer
CMU - SEI
