Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

Avatar for PyCon 2016 PyCon 2016
June 01, 2016
Programming
6
930

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

Avatar for PyCon 2016

PyCon 2016

June 01, 2016
Tweet

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
Avatar for PyCon 2016 pycon2016
6
920
Brett Slatkin - Refactoring Python: Why and how to restructure your code
Avatar for PyCon 2016 pycon2016
17
5.6k
Mike Graham - The Life Cycle of a Python Class
Avatar for PyCon 2016 pycon2016
7
8.8k
Nathaniel Manista, Augie Fackler - Code Unto Others
Avatar for PyCon 2016 pycon2016
0
510
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
Avatar for PyCon 2016 pycon2016
0
770
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
Avatar for PyCon 2016 pycon2016
0
350
Jake Vanderplas - Statistics for Hackers
Avatar for PyCon 2016 pycon2016
17
5k
Daniele Procida - Documentation-driven development - lessons from the Django Project
Avatar for PyCon 2016 pycon2016
3
860
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
Avatar for PyCon 2016 pycon2016
0
540

Other Decks in Programming

See All in Programming
Laravel Boost 超入門
Avatar for Arlo fire_arlo
3
220
go test -json そして testing.T.Attr / Kyoto.go #63
Avatar for utagawa kiki utgwkk
3
310
Azure SRE Agentで運用は楽になるのか？
Avatar for KAMEGAWA Kazushi kkamegawa
0
2.5k
Putting The Genie in the Bottle - A Crash Course on running LLMs on Android
Avatar for Iury Souza iurysza
0
140
個人開発で徳島大学生60％以上の心を掴んだアプリ、そして手放した話
Avatar for akidon0000 akidon0000
1
140
今だからこそ入門する Server-Sent Events (SSE)
Avatar for NearMeの技術発表資料です nearme_tech
PRO
3
250
Tool Catalog Agent for Bedrock AgentCore Gateway
Avatar for matsukada licux
7
2.5k
Testing Trophyは叫ばない
Avatar for toms toms74209200
0
890
スケールする組織の実現に向けた インナーソース育成術 - ISGT2025
Avatar for teamLab teamlab
PRO
1
160
より安全で効率的な Go コードへ： Protocol Buffers Opaque API の導入
Avatar for shoyan shwatanap
2
720
基礎から学ぶ大画面対応(Learning Large-Screen Support from the Ground Up)
Avatar for Tomoya Miwa tomoya0x00
0
3.3k
Flutter with Dart MCP: All You Need - 박제창 2025 I/O Extended Busan
Avatar for JaiChangPark itsmedreamwalker
0
150

Featured

See All Featured
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
Avatar for Sam Stephenson sstephenson
162
15k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
462
33k
Code Reviewing Like a Champion
Avatar for maltzj maltzj
525
40k
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
29
1.9k
Imperfection Machines: The Place of Print at Facebook
Avatar for Scott Boms scottboms
268
13k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
53
7.8k
Faster Mobile Websites
Avatar for Dean Hume deanohume
309
31k
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
160
23k
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
31
6.1k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
671
58k
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
9
580
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
22k

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com