Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Baking Security into your workflow - Early

Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
0
990

Baking Security into your workflow - Early

A more Developer focused security talk, about security and automation.

Avatar for Tim Nash

Tim Nash

January 01, 2017
Tweet

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
470
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.3k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
69
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
410
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
HTTPS and You
Avatar for Tim Nash timnashcouk
0
1k
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
Claude Code の Skill で複雑な既存仕様をすっきり整理しよう
Avatar for yuichiro_takahashi yuichirokato
1
360
メタプログラミングで実現する「コードを仕様にする」仕組み/nikkei-tech-talk43
Avatar for 日本経済新聞社 エンジニア採用事務局 nikkei_engineer_recruiting
0
170
TipKitTips
Avatar for Ryomm ktcryomm
0
160
Codexに役割を持たせる 他のAIエージェントと組み合わせる実務Tips
Avatar for o8n o8n
3
1.2k
モジュラモノリスにおける境界をGoのinternalパッケージで守る
Avatar for magavel magavel
0
3.5k
AI駆動開発の本音 〜Claude Code並列開発で見えたエンジニアの新しい役割〜
Avatar for hisuzuya hisuzuya
4
500
AI時代のソフトウェア開発でも「人が仕様を書く」から始めよう-医療IT現場での実践とこれから
Avatar for kouki.miura koukimiura
0
140
エージェント開発初心者の僕が エージェントを作った話と今後やりたいこと
Avatar for ta-hasunuma thasu0123
0
240
受け入れテスト駆動開発(ATDD)×AI駆動開発 AI時代のATDDの取り組み方を考える
Avatar for Takasaki Kazunari kztakasaki
2
550
AIコードレビューの導入・運用と AI駆動開発における「AI4QA」の取り組みについて
Avatar for ハゲワシ hagevvashi
0
420
DevinとClaude Code、SREの現場で使い倒してみた件
Avatar for karia/Y.Hisamatsu karia
1
1k
AIコーディングの理想と現実 2026 | AI Coding: Expectations vs. Reality 2026
Avatar for Tomohisa Takaoka tomohisa
0
1.2k

Featured

See All Featured
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
191
11k
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
Avatar for Liv Day livdayseo
0
82
How Fast Is Fast Enough? [PerfNow 2025]
Avatar for Tammy Everts tammyeverts
3
480
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
97
6.5k
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
9.8k
Believing is Seeing
Avatar for Spiro Bolos oripsolob
1
79
Between Models and Reality
Avatar for mayunak mayunak
2
230
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
133
19k
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
698
190k
Learning to Love Humans: Emotional Interface Design
Avatar for Aarron Walter aarron
275
41k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
333
24k
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
710

Transcript

  1. Baking Security
 In To Your Workflow Tim Nash - @tnash

  2. None

  3. What is security?

  4. Governance Security

  5. Who is responsible?

  6. YOU! [insert picture of crowd here]

  7. What’s in scope?

  8. Production

  9. Staging?

  10. Staging? Development?

  11. Global workplace?

  12. None
  13. None

  14. “I am not in the office at the moment. Send

    any work to be translated”

  15. Education, Education, Education

  16. Tooling

  17. Burp Suite OWASP Zap w3af sqlmap wfuzz Arachni

  18. Automating security

  19. You already do tests right?

  20. Mittn BDD-Security gauntlt

  21. Or use your existing tools

  22. Keeping Secrets Safe

  23. Vault credstash git crypt

  24. Logging and Audit trails

  25. Serverless Infrastructure

  26. Containers & Orchestration

  27. “Developers focus on solving a problem, security looks at what

    else those solutions can be used for” Mark Nunnikhoven

  28. Be a chaos monkey

  29. None

  30. Photo credits: Siobhan Hancock Daniel Foster David Goehring Jim Lukach

    Rich Savage Stephen Bowler Found Art Photography Martin Kriebernegg Alvaro Carou Jumilia

  31. WordPress Hosting Experts

  32. Tim Nash @tnash timnash.co.uk @34SP
 34SP.com