Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

Avatar for PyCon 2016 PyCon 2016
June 01, 2016
Programming
980
6

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

Avatar for PyCon 2016

PyCon 2016

June 01, 2016

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
Avatar for PyCon 2016 pycon2016
6
970
Brett Slatkin - Refactoring Python: Why and how to restructure your code
Avatar for PyCon 2016 pycon2016
17
5.8k
Mike Graham - The Life Cycle of a Python Class
Avatar for PyCon 2016 pycon2016
7
8.9k
Nathaniel Manista, Augie Fackler - Code Unto Others
Avatar for PyCon 2016 pycon2016
0
540
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
Avatar for PyCon 2016 pycon2016
0
810
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
Avatar for PyCon 2016 pycon2016
0
390
Jake Vanderplas - Statistics for Hackers
Avatar for PyCon 2016 pycon2016
19
8.7k
Daniele Procida - Documentation-driven development - lessons from the Django Project
Avatar for PyCon 2016 pycon2016
3
900
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
Avatar for PyCon 2016 pycon2016
0
590

Other Decks in Programming

See All in Programming
PHPで使える日時の表現と、その知り方 #frontend_phpcon_do
Avatar for hideki kinjyo o0h
PRO
0
250
過去最大のMCPアップデート! 2026-07-28 RC版の謎に迫る
Avatar for matsukada licux
6
360
LLM本来の能力を解き放つサンドボックス技術とAI民主化への適用
Avatar for Yuku Kotani yukukotani
3
4.3k
脅威をエンジニアリングの糧にして――現場編 / Turning Threats into Engineering Fuel — Field Edition
Avatar for nrs nrslib
0
290
Lessons from Spec-Driven Development
Avatar for Simon Martinelli simas
PRO
0
210
キャリア迷子上等 ─ "ない道"は自分で作ればいい
Avatar for 16bit_idol 16bitidol
3
2.1k
ADKを使って簡単にAIエージェントを作ってみよう
Avatar for K1mu21 k1mu21
0
270
Observability in Practice：Grafana 與 Edge Device SRE 的那些事
Avatar for Blueswen blueswen
0
170
[2026年度第1回ORセミナー] 計画最適化ベンチャーと競技プログラミング人材
Avatar for terry-u16 terryu16
0
270
Spring Security 実践 ─ GraphQL APIで実務に役立つ 認証・認可 を学ぶ
Avatar for Wagyu wagyu
0
250
Spec Driven Development | AI Summit Lisbon
Avatar for Daniel Sogl danielsogl
PRO
0
200
気づいたらRubyで100作品 ー クリエイティブコーディングが生活の一部になるまで / 100 Ruby Sketches Later: How Creative Coding Became Part of My Life
Avatar for chobishiba chobishiba
3
590

Featured

See All Featured
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.6k
Learning to Love Humans: Emotional Interface Design
Avatar for Aarron Walter aarron
275
41k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
302
52k
Neural Spatial Audio Processing for Sound Field Analysis and Control
Avatar for NII S. Koyama's Lab skoyamalab
0
340
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
187
22k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
9
970
A brief & incomplete history of 
UX Design for the World Wide Web: 1989–2019
Avatar for Jason CranfordTeague jct
2
400
Lessons Learnt from Crawling 1000+ Websites
Avatar for Charles Meaden charlesmeaden
PRO
1
1.3k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
230
23k
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
310
Side Projects
Avatar for Sacha Greif sachag
455
43k
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
Avatar for Ines Montani inesmontani
PRO
3
3.5k

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com