Security survival skills (for the adventurous developer)

Transcript

1. Security skills for the adventurous developer Laura Bell F O U N D E R & L E A D C O N S U LTA N T S A F E S TAC K @ l a d y _ n e rd l a u r a @ s a fe s t a c k . i o
2. the world is a terrible place
3. the internet is a festering pool of toxic waste
5. somebody probably wants to do bad things to your computer
6. the security situation is beyond hope
8. we can build amazing things
12. doing this securely is hard
13. QQ
14. good adventures are supposed to be challenging
15. so stop waiting for someone to hand you these skills on a plate
16. this is your adventure
17. let’s get started
18. prepare for the (inevitable) sequel protect your treasure build amazing machines always have an escape route watch your back take the road well travelled prepare yourself plan your route (but keep it flexible)
19. prepare yourself
20. security starts with education
21. security is a team sport
22. plan your route (but keep it flexible)
23. design before implementation
24. examine all the options
25. security requires compromises
26. take the road well travelled
27. follow in someone else’s footsteps
28. know where to look for direction
29. expose yourself to scrutiny
30. build amazing machines
31. build amazing machines
32. security needs a robot army
33. immutable architectures help security
34. watch your back
35. know everything there is to know
36. use clever tools to build clever things
37. Watch for expensive distractions
38. more alarms and no surprises
39. security is the long game
40. watch for spies
41. always have an escape route
42. have a backup (plan)
43. be prepared to action it
44. store your backups securely
45. protect your treasure
46. know the value of what you have around you
47. vs. vs. value is relative
48. secure data starts with secure storage
49. so about those passwords?
50. secure systems need gatekeepers
51. prepare for the (inevitable) sequel
52. celebrate your successes
53. learn from your mistakes
54. prepare for the next adventure
55. the world is a terrible place
56. secure your own adventure
57. questions? Laura Bell F O U N D E R & L E A D C O N S U LTA N T S A F E S TAC K @ l a d y _ n e rd l a u r a @ s a fe s t a c k . i o