Secure application development (SAD) is a vital part of IT security, and UF Security Team member Jim Hranicky has details on how to make sure your applications do what they're supposed to do...and ONLY what they're supposed to do.

Hranicky presented his workshop, Best Practices for Happy SAD (Secure Application Development), at the Health Science Center on May 14 and 15, where it was well received. Among other topics, the workshop includes techniques for writing secure code, best practices for secure programming, and an overview of the SPICE (Software Process Improvement and Capability dEtermination) standard.

Hranicky also discusses UF Security Policy as a part of this workshop, with an emphasis on sensitive student and patient data. With the multitude of university, state, and federal laws and guidelines concerning privacy matters, a thorough understanding of this area is essential to the applications developer. Hranicky welcomes the chance to offer this workshop to any interested department. Call 352-392-2061, or e-mail jfh@ufl.edu .

We welcome your comments and suggestions on this and all CNS documentation. Please send your comments to: