Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
Security survival skills (for the adventurous d...
Search
Laura Bell
April 24, 2015
Technology
130
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
Security survival skills (for the adventurous developer)
Laura Bell
April 24, 2015
Transcript
57 slides
Security skills for the adventurous developer Laura Bell F O
U N D E R & L E A D C O N S U LTA N T S A F E S TAC K @ l a d y _ n e rd l a u r a @ s a fe s t a c k . i o
the world is a terrible place
the internet is a festering pool of toxic waste
None
somebody probably wants to do bad things to your computer
the security situation is beyond hope
None
we can build amazing things
None
None
None
doing this securely is hard
QQ
good adventures are supposed to be challenging
so stop waiting for someone to hand you these skills
on a plate
this is your adventure
let’s get started
prepare for the (inevitable) sequel protect your treasure build amazing
machines always have an escape route watch your back take the road well travelled prepare yourself plan your route (but keep it flexible)
prepare yourself
security starts with education
security is a team sport
plan your route (but keep it flexible)
design before implementation
examine all the options
security requires compromises
take the road well travelled
follow in someone else’s footsteps
know where to look for direction
expose yourself to scrutiny
build amazing machines
build amazing machines
security needs a robot army
immutable architectures help security
watch your back
know everything there is to know
use clever tools to build clever things
Watch for expensive distractions
more alarms and no surprises
security is the long game
watch for spies
always have an escape route
have a backup (plan)
be prepared to action it
store your backups securely
protect your treasure
know the value of what you have around you
vs. vs. value is relative
secure data starts with secure storage
so about those passwords?
secure systems need gatekeepers
prepare for the (inevitable) sequel
celebrate your successes
learn from your mistakes
prepare for the next adventure
the world is a terrible place
secure your own adventure
questions? Laura Bell F O U N D E R
& L E A D C O N S U LTA N T S A F E S TAC K @ l a d y _ n e rd l a u r a @ s a fe s t a c k . i o
More Decks by Laura Bell
See All by Laura Bell
DIY security for the amateur superhero
ladynerd
0
330
Hackcon 11 - Protecting our people
ladynerd
0
270
Security in a container based world
ladynerd
0
170
Securing Microservice Architectures
ladynerd
2
380
Better Connected
ladynerd
0
95
Continuous Security
ladynerd
3
1.2k
Automated Human Vulnerability Scanning with AVA
ladynerd
3
2.8k
Blindsided by security
ladynerd
0
160
Practical tools for privacy audit
ladynerd
0
240
Other Decks in Technology
See All in Technology
DevOps Agentにあらゆるセキュリティインシデントのトリアージを任せた件
jirtosterone
1
150
AI時代の組織作り:チーム開発から「個人×AI」への移行と、持続可能な「開発資本」の築き方
ham0215
3
840
会社説明資料_最新版
demaecan
0
32k
Gov-JAWS#9 統合監視機能のマネージドサービス化+AIによる障害時自動調査
fj_yoshimura_kosuke
0
100
生成AI時代のIAMのマニアックな話
takuros
6
3.2k
小さなエージェントから始めてみよう!実践コンテキストエンジニアリング
iwamot
PRO
0
120
ぼくのClaude Codeの使い方
falken
PRO
5
7.1k
[NW-JAWS DAY]「うちのAWS、インターネット出られないんで」― AWS外の自社サービスをPrivateLinkでシュッと公開する方法
ykimi
2
450
Context Ontology Accelerator 入門 (業務データの意味を、AI エージェントに渡す)
inariku
PRO
3
680
Sonnetだけで業務はまわる?
kintotechdev
1
120
さようならSSH鍵、こんにちはゼロトラスト ― AIフレンドリーで快適な自宅鯖SSH
atalie2m
1
180
Steering と Hook (チームの決まりを守らせる) | 目指せ Kiro マスター 06
inariku
PRO
2
130
Featured
See All Featured
From Legacy to Launchpad: Building Startup-Ready Communities
dugsong
0
380
WCS-LA-2024
lcolladotor
0
1k
Balancing Empowerment & Direction
lara
6
1.4k
A brief & incomplete history of UX Design for the World Wide Web: 1989–2019
jct
2
560
エンジニアに許された特別な時間の終わり
watany
109
250k
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
techseoconnect
PRO
0
750
Designing Powerful Visuals for Engaging Learning
tmiket
1
650
Understanding Cognitive Biases in Performance Measurement
bluesmoon
32
3.1k
Six Lessons from altMBA
skipperchong
29
4.6k
How Software Deployment tools have changed in the past 20 years
geshan
3
35k
End of SEO as We Know It (SMX Advanced Version)
ipullrank
3
4.5k
A Soul's Torment
seathinner
9
3.9k