My presentation is up on my masters website. I decided to use some FUD from the recent Bofra IFRAME attacks to show that patching isn't really being done right. I then used that as a case study to show why people aren't deploying patches (XP SP2 for e.g.) and why defence in depth is needed. I then talked about my best practises methodology and architecture that I have come up with so far.

It went quite well except the exploit didn't happen. Evidently I hadn't sacrificed enough to the demo gods. The virus scanner kicked in and I had forgotten to turn it off in the last minute shuffle to find a working projector. I was expecting more people to have questions or at least worried looks on their faces, but either they had be scared by computer security people for many years or they felt safe behind their anti-virus signatures.