Friday, 10 March 2006 9:27 PM
Rocky
Andrew Coates' Interview Answers
Here are the answers that Andrew Coates' gave me when he did the mini-interview.
Aside from the boiler plate text that is posted on the eForum web site about your presentation, what would you say are the cool points in your presentation?
AC: Developers now have the tools to help them think about writing more secure applications - you still need to use your brain, but you can scale that to apply across much wider parts of your app more easily
From your talk, what are the top 3 things you want the attendees to take home with them?
AC:
1. Read about CAS, and understand how granular you can be with the permissions your app needs
2. Don't run as admin as a developer. Start adopting the principle of Least Privilege in all aspects of your development and other work .
3. Learn about the new SQL Server model for grouping permissions - Schemas.
Why is your talk important, what is the industry need behind it?
AC: Applications are now the weakest link in the security chain - making use of the tools I show is not a substitute for thinking, but it can help to ensure that your application is more secure and less likely to lead to a costly loss of data or services.
Who do you think will get the most from your talk?
AC: Developers, developer managers and SQL Server professionals.
What is your ‘pet’ security topic?
AC: Running as non-admin.
What do you think IT Pro and Developers need to be looking to do better in the future?
AC: One word - communication. Communication within teams, communication between teams and communication with the wider population.