Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

PyCon 2016
June 01, 2016
Programming
6
910

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

PyCon 2016

June 01, 2016
Tweet

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
pycon2016
6
900
Brett Slatkin - Refactoring Python: Why and how to restructure your code
pycon2016
17
5.5k
Mike Graham - The Life Cycle of a Python Class
pycon2016
7
8.8k
Nathaniel Manista, Augie Fackler - Code Unto Others
pycon2016
0
500
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
pycon2016
0
740
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
pycon2016
0
330
Jake Vanderplas - Statistics for Hackers
pycon2016
17
4.8k
Daniele Procida - Documentation-driven development - lessons from the Django Project
pycon2016
4
830
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
pycon2016
0
510

Other Decks in Programming

See All in Programming
Honoとフロントエンドの 型安全性について
yodaka
7
1.4k
Grafana Loki によるサーバログのコスト削減
mot_techtalk
1
130
コミュニティ駆動 AWS CDK ライブラリ「Open Constructs Library」 / community-cdk-library
gotok365
2
200
Multi Step Form, Decentralized Autonomous Organization
pumpkiinbell
1
830
メンテが命: PHPフレームワークのコンテナ化とアップグレード戦略
shunta27
0
280
仕様変更に耐えるための"今の"DRY原則を考える
mkmk884
9
2.9k
.NET Frameworkでも汎用ホストが使いたい！
tomokusaba
0
190
Conform を推す - Advocating for Conform
mizoguchicoji
3
710
How mixi2 Uses TiDB for SNS Scalability and Performance
kanmo
40
16k
Boost Performance and Developer Productivity with Jakarta EE 11
ivargrimstad
0
620
Rubyで始める関数型ドメインモデリング
shogo_tksk
0
130
負債になりにくいCSSをデザイナとつくるには？
fsubal
10
2.5k

Featured

See All Featured
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
44
7k
Done Done
chrislema
182
16k
Building a Modern Day 
E-commerce SEO Strategy
aleyda
38
7.1k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
666
120k
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
40
2k
A better future with KSS
kneath
238
17k
Building Flexible Design Systems
yeseniaperezcruz
328
38k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
233
17k
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
28
9.3k
For a Future-Friendly Web
brad_frost
176
9.6k
A Tale of Four Properties
chriscoyier
158
23k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
27
1.9k

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com