Fireside Chat with Silicon Valley VP Mike Skurko and Jason Landers Director of Systems Engineering at TrustInSoft – December 5th
Title: A “Mathe-magical” Shift Left in the SDLC – Zero Day Eradication!
Synopsis: In this casual fireside chat Jason Landers and I will discuss the SDLC and the ongoing BIG PROBLEM: Typically business drivers insist we release code and that with the existing methodologies of SAST, DAST, Fuzzing, and manual code review it is not possible to ensure full coverage and that you have found all of the bugs in code – in particular the issues of undefined behaviors and buffer overflows. (These are the big ones in the news with no-click access to iOS and Android devices.) We will discuss this gold standard of testing which – when using Formal Methods allows for a mathematical proof that your code will run as intended. For safety-critical and cybersecurity concerns – particularly with the Trusted Execution Environment (TEE) of cell phones as the use case de jour for Formal Methods. This methodology is changing the world of code testing to ensure an end to the conundrum of the shift left in the SDLC and the business drivers that typically have ensured that code has traditionally been released with bugs.
Mike Skurko is on his 3d term as VP of the Silicon Valley ISSA where he is responsible for bringing in industry speakers and sponsors for the chapter. Mike is an information security professional with over 15 years of experience in early-phase cybersecurity startups. He is currently the VP of Sales at TrustInSoft where he is building a team and leading the expansion in the US market. Previously he was the founder and CEO of PRE Consulting based in Silicon Valley, where he connected security solutions and practitioners to the APAC market. Mike is an active member of both the Silicon Valley and North Texas chapters of the ISSA. He was raised in Japan and speaks the language and particularly the cuisine of the country fluently.
Jason Lander's career spans over 25 years as both a founder in Cybersecurity as well as working with fortune 500 global enterprises as part of Microsoft Research, Intel Labs, Mandiant, Tektronix, FireEye, Rapid7, and other industry visionaries to improve DevSecOps strategies and other defensive cyber capabilities. Originally a software developer who wrote his first "hello world" code at 12 years old, Jason has a compelling passion and vision for the future of Cybersecurity.
