1 / 19

What's a CS to do?

What's a CS to do?. ACM Columbia University 25 February 2009. Computer humor. How many software developers does it take to screw in a light bulb?. Let’s talk money…NACE 2009. Computer science grads saw their average salary offer fall 1.4% from $56,920 to $56,128.

mason-rose
Download Presentation

What's a CS to do?

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. What's a CS to do? ACM Columbia University 25 February 2009

  2. Computer humor • How many software developers does it take to screw in a light bulb?

  3. Let’s talk money…NACE 2009 • Computer science grads saw their average salary offer fall 1.4% from $56,920 to $56,128. • For those employers who expect to offer signing bonuses to computer science grads, the average bonus will be about 25% lower than 2008’s average bonus.

  4. The economy • It’s going to have an impact for at least three years... • …but the Stimulus Plan may actually help with jobs. • Smart infrastructure • Smart energy • Smart healthcare

  5. Separating yourself • It’s not the degree nor the school – it’s your brand • What programming issues do professionals face? • What areas will be hot for CS majors? • Staying in front – listening to those on the street & prospecting for positions instead of applying to them

  6. Your brand and being found • You must have a social media strategy • Blogging • Videos • Podcasts • Photos • Facebook, LinkedIn, Twitter • It’s all about building relationships

  7. Top 25 programming errors • Insecure Interaction Between Components • Risky Resource Management • Porous Defenses • Source: SANS Institute - www.sans.org/top25errors/ SANS (SysAdmin, Audit, Network, Security) Institute • Source: MITRE Corp - cwe.mitre.org/top25/

  8. The impact of the top 25 errors • Software buyers will be buy much safer software. • Programmers will have tools that consistently measure the security of the software they are writing. • Colleges will teach secure coding more confidently. • Employers will ensure they have programmers who can write more secure code.

  9. Insecure interaction b/n components • Improper Input Validation • Improper Encoding or Escaping of Output • Failure to Preserve SQL Query Structure (SQL Injection) • Failure to Preserve Web Page Structure (Cross-site Scripting) • Failure to Preserve OS Command Structure (OS Command Injection) • Cleartext Transmission of Sensitive Information • Cross-Site Request Forgery (CSRF) • Race Condition • Error Message Information Leak

  10. Risky resource management • Failure to Constrain Operations within the Bounds of a Memory Buffer • External Control of Critical State Data • External Control of File Name or Path • Untrusted Search Path • Failure to Control Generation of Code (Code Injection) • Download of Code Without Integrity Check • Improper Resource Shutdown or Release • Improper Initialization • Incorrect Calculation

  11. Porous defenses • Improper Access Control (Authorization) • Use of a Broken or Risky Cryptographic Algorithm • Hard-Coded Password • Insecure Permission Assignment for Critical Resource • Use of Insufficiently Random Values • Execution with Unnecessary Privileges • Client-Side Enforcement of Server-Side Security

  12. What will be hot in 2009+? • VirtualizationThis includes server virtualization as well as storage and client devices. Greater efficiencies and elimination of duplicate copies of data on real storage devices. • Cloud computingThe built-in elasticity and scalability of cloud computing will help smaller companies grow quickly while also reducing barriers to entry.

  13. What will be hot in 2009+? • Servers - beyond bladesEvolving servers will simplify the provisioning of capacity so organizations will be able to track an individual resource type - such as memory or processing power - and replace as needed, rather than having to pay for all resources every time an upgrade is needed. • Web-oriented architectures Web-centric technologies and standards will continue to affect enterprise computing models leading to greater use of service-oriented environments.

  14. What will be hot in 2009+? • Enterprise mash-upsMash-ups are being added to enterprise systems to help deliver and manage applications. • Specialized systemsHeterogeneous server systems are big in high performance computing from previously dedicated appliances.

  15. What will be hot in 2009+? • Social software and social networkingLeading organizations add a social dimension to a conventional website or application. • Unified communications Massive consolidation in the communications industry as applications shift to off-the-shelf server and operating systems. This means formerly distinct markets and vendors will converge requiring organizations to take account of communications functions being replaced or converged.

  16. What will be hot in 2009+? • Business intelligenceBI continues to boost and transform business performance, particularly in a difficult business environment like the current global credit crunch. • Green ITCompanies should think about shifting to more efficient products and processes as environmental scrutiny increases, and cut energy use. Green regulation is “hot” and this especially has the potential to seriously limit how businesses build data centers so organizations will require alternative plans for capacity growth.

  17. Really hot • Financial services especially refactoring of legacy systems • Games • Mobile: Smaller and smaller

  18. Sites • http://www.joelonsoftware.com/index.html • http://slashdot.org/ • http://www.joltawards.com • http://www.indeed.com

  19. Me Steve Levy The Tuttle Agency 295 Madison Avenue, 8th Floor New York 10017 212-497-9576 slevy@tuttleagency.com My blog Connect to me on LinkedIn Follow me on Twitter

More Related