Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Baking Security into your workflow - Early

Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
0
980

Baking Security into your workflow - Early

A more Developer focused security talk, about security and automation.
Avatar for Tim Nash

Tim Nash

January 01, 2017
Tweet

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
460
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.3k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
65
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
380
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
HTTPS and You
Avatar for Tim Nash timnashcouk
0
1k
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
Create a website using Spatial Web
Avatar for Akio Itaya akkeylab
0
310
Azure AI Foundryではじめてのマルチエージェントワークフロー
Avatar for 瀬尾佳隆 seosoft
0
140
Blazing Fast UI Development with Compose Hot Reload (droidcon New York 2025)
Avatar for Márton Braun zsmb
1
260
20250613-SSKMvol.15
Avatar for diostray diostray
0
100
たった 1 枚の PHP ファイルで実装する MCP サーバ / MCP Server with Vanilla PHP
Avatar for Shohei Okada okashoi
1
210
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
48
32k
PicoRuby on Rails
Avatar for makicamel makicamel
2
110
Bytecode Manipulation 으로 생산성 높이기
Avatar for Daekyu bigstark
2
390
deno-redisの紹介とJSRパッケージの運用について (toranoana.deno #21)
Avatar for uki00a uki00a
0
150
童醫院敏捷轉型的實踐經驗
Avatar for Max Lai cclai999
0
200
NPOでのDevinの活用
Avatar for みんなのコード codeforeveryone
0
460
型付きアクターモデルがもたらす分散シミュレーションの未来
Avatar for Takatomo Torigoe piyo7
0
810

Featured

See All Featured
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
512
110k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
34
5.9k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
39
1.9k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
667
120k
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
1
380
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
179
9.8k
A better future with KSS
Avatar for Kyle Neath kneath
239
17k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
252
21k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
51
3.3k
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
94
14k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
614
210k
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
160
23k

Transcript

  1. Baking Security
 In To Your Workflow Tim Nash - @tnash

  2. None

  3. What is security?

  4. Governance Security

  5. Who is responsible?

  6. YOU! [insert picture of crowd here]

  7. What’s in scope?

  8. Production

  9. Staging?

  10. Staging? Development?

  11. Global workplace?

  12. None
  13. None

  14. “I am not in the office at the moment. Send

    any work to be translated”

  15. Education, Education, Education

  16. Tooling

  17. Burp Suite OWASP Zap w3af sqlmap wfuzz Arachni

  18. Automating security

  19. You already do tests right?

  20. Mittn BDD-Security gauntlt

  21. Or use your existing tools

  22. Keeping Secrets Safe

  23. Vault credstash git crypt

  24. Logging and Audit trails

  25. Serverless Infrastructure

  26. Containers & Orchestration

  27. “Developers focus on solving a problem, security looks at what

    else those solutions can be used for” Mark Nunnikhoven

  28. Be a chaos monkey

  29. None

  30. Photo credits: Siobhan Hancock Daniel Foster David Goehring Jim Lukach

    Rich Savage Stephen Bowler Found Art Photography Martin Kriebernegg Alvaro Carou Jumilia

  31. WordPress Hosting Experts

  32. Tim Nash @tnash timnash.co.uk @34SP
 34SP.com