You Can Build It: Open Source & Cybersecurity

キルギスの専門学校生に対する特別授業で使ったスライドです。オープンソースとサイバーセキュリティについて。

Transcript

1. You Can Build It Open Source & Cybersecurity An introduction for future IT professionals 1
2. Two topics today 1. Open Source How people work together to improve software. 2. Cybersecurity How we protect software, systems, and data. These topics are different, but they are connected. 2
3. OPEN SOURCE Open Source is not only source code. It is also people working together. 3
4. What is Open Source? Open Source software can be studied, changed, and improved by its community. People can: • write programs • translate software • test it and report problems • write documents and organize events We make software together. 4
5. You do not need to be an expert. You can join a community before you are an expert. You can ask questions. You can try something small. You can learn from other people. Join first. Learn together. 5
6. Example: LibreOffice LibreOffice is office software, similar to Microsoft Office. You can use it for: • documents • spreadsheets • presentations LibreOffice is Free and Open Source software. 6
7. Software should speak your language. Software is easier to use when it supports the language you use every day. For me, that language is Japanese. For many people here, it is Kyrgyz. But who translates the software? 7
8. LibreOffice and Kyrgyz LibreOffice already has a Kyrgyz translation project. There is still a lot of translation work to do. With Open Source, you do not have to wait for a software company to do everything. People in the community can help. 8
9. Who can help? YOU CAN. If you know Kyrgyz, you already have a skill that the project needs. 9
10. I did it too. I helped translate LibreOffice into Japanese. I am a software engineer, but translation was also part of my Open Source work. Open Source contribution is not only programming. 1 0
11. Open Source is people. Through Open Source, people: • learn together • build software together • organize communities and events • meet people from other countries For me, the community is as important as the software. 1 1
12. What about Kyrgyzstan? A community does not need to start with a large conference or hundreds of people. It can start with a few people who care. What software do you want? What language support do you need? What community would you like to build? 1 2
13. CYBERSECURITY We build software. Now, how do we make it safe? 1 3
14. What is Cybersecurity? We use computers and smartphones every day. They contain important information. Companies also depend on software, systems, and data. Cybersecurity means protecting those systems and that information. 1 4
15. What do we protect? 1. Keep secrets secret. Confidentiality 2. Keep data correct. Integrity 3. Keep systems working. Availability These three ideas are called the CIA triad. 1 5
16. Software has bugs. A normal bug may be annoying. Example: I click a button. Nothing happens. This is a software problem, but it may not be a security problem. 1 6
17. Some bugs are dangerous. Example: I log in with MY account. But the system shows me YOUR private data. Now confidentiality is broken. This kind of security weakness is called a vulnerability. 1 7
18. Attackers look for vulnerabilities. Attackers may use vulnerabilities to: • steal secret information • change important data • stop systems Security engineers also look for vulnerabilities. The important question is: Who finds the problem first? 1 8
19. This is part of my job. I work in cybersecurity. Security companies try to find problems before attackers find and use them. Finding vulnerabilities is important. But there is an even better idea. 1 9
20. Better than finding a vulnerability: Do not create it. Think about security while you build software. 2 0
21. Secure Coding Secure Coding means writing software with security in mind. Developers learn common security problems and try to avoid them while writing code. Security is part of development, not only a final check before release. 2 1
22. Humans make mistakes. Even experienced developers make mistakes. So we also use tools to help us. Automated Security Testing can check code and software during development. People + tools work together. 2 2
23. DevSecOps Development + Security + Operations DevSecOps tries to include security throughout software development. Developers and security engineers work together instead of waiting until the end. 2 3
24. Shift Left Shift Left means thinking about security earlier. Find problems earlier. Fix problems earlier. Prevent problems when possible. This is the main area of my work today. 2 4
25. ONE COMMON IDEA Open Source and Cybersecurity both invite you to become a creator. 2 5
26. Open Source says: You can help BUILD software. You can write code. You can translate. You can test. You can join a community. You can make software better. 2 6
27. Cybersecurity says: You can help make software SAFE. You can learn secure coding. You can find security problems. You can prevent problems earlier. Security is part of building good software. 2 7
28. You can be a creator. You do not need to know everything. Start small. Learn. Build. Share. 2 8
29. Three messages Enjoy IT. Join communities. Build secure software. Thank you! 2 9