$30 off During Our Annual Pro Sale. View Details »

Secure Software Development

Secure Software Development

Talk for GDL Connect meetup

Jorge Gaona

August 16, 2017
Tweet

More Decks by Jorge Gaona

Other Decks in Technology

Transcript

  1. Secure
    Software
    Development
    Jorge Gaona (@pollirrata)
    Enterprise Architect @
    Tiempo Development
    Client Solutions Architect @
    e-nnovare

    View Slide

  2. What´s security?
    • Protecting data and information from unauthorized access
    • Ensuring access to authorized entities
    • Trusting your data is what you think it is

    View Slide

  3. Impact
    Security
    Availability
    Privacy
    Reliability
    Safety
    Compliance

    View Slide

  4. Characteristics
    Confidentiality
    Integrity
    Availability
    Authentication
    Authorization
    Non-
    repudiation
    supported by

    View Slide

  5. Mb + Pb > Ocp + OcmPaPc
    • Mb is the monetary benefit for the attacker.
    • Pb is the psychological benefit for the attacker.
    • Ocp is the cost of committing the crime.
    • Ocm is the monetary costs of conviction for the attacker.
    • Pa is the probability of being apprehended and arrested.
    • Pc is the probability of conviction for the attacker.

    View Slide

  6. Ratio
    Emojis: https://commons.wikimedia.org
    10 80 10
    %

    View Slide

  7. Risks
    Avoidance
    Acceptance
    Mitigation
    Transfer
    Residual

    View Slide

  8. User Attack Surface
    • Amount of code
    • Number of inputs
    • Number of services
    • Number of open
    communication ports
    • Is your user stupid? (errors,
    social engineering, phishing)
    • Is your user evil?
    Application Attack Surface

    View Slide

  9. Tactics

    View Slide

  10. OWASP ASVS
    Provides developers with a list of requirements for secure
    development.

    View Slide

  11. View Slide

  12. View Slide

  13. ASVS Example

    View Slide

  14. Strategy

    View Slide

  15. Can software kill us?
    https://www.mymovievault.com/img/backdrop/3htQsZfX1cbtevy7osGJDZVOQfE.jpg

    View Slide