Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Baking Security into your workflow - Early

Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
990
0

Baking Security into your workflow - Early

A more Developer focused security talk, about security and automation.

Avatar for Tim Nash

Tim Nash

January 01, 2017

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
470
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.4k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
72
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
420
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
HTTPS and You
Avatar for Tim Nash timnashcouk
0
1k
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
Hive Metastoreを通して学ぶIceberg REST Catalog ― 仕様から実装まで
Avatar for okumin okumin
0
150
My daily life on Ruby
Avatar for Akira Matsuda a_matsuda
3
410
ECR拡張スキャンでSBOMを収集して サプライチェーン攻撃の影響調査を 爆速で終わらせてみた
Avatar for アキキー | Akihisa Ikeda akihisaikeda
1
120
RailsTokyo 2026#4: AI様があれば、
Hotwireの弱点は消えるか？
Avatar for Naofumi Kagami naofumi
3
390
Are We Really Coding 10× Faster with AI?
Avatar for Koichi Yoshida kohzas
0
190
PHPでバイナリをパースして理解するASN.1
Avatar for muno92 muno92
PRO
0
460
Sans tests, vos agents ne sont pas fiables
Avatar for Nathan Abondance nabondance
0
130
PHPでローカル環境用のSSL/TLS証明書を発行することはできるのか？ #phpconkagawa
Avatar for akase244 akase244
0
370
Spec-Driven Development with AI Agents (Workshop, May 2026)
Avatar for Anton Arhipov antonarhipov
3
380
HTML-Aware ERB: The Path to Reactive Rendering @ RubyKaigi 2026, Hakodate, Japan
Avatar for Marco Roth marcoroth
0
720
AI時代になぜ書くのか
Avatar for Mutz mutsumix
0
420
ReactとSvelteのその先、Ripple-TS / Beyond React and Svelte: Ripple-TS
Avatar for TOMIKAWA Sotaro ssssota
0
200

Featured

See All Featured
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
7k
Ecommerce SEO: The Keys for Success Now & Beyond - #SERPConf2024
Avatar for Aleyda Solis aleyda
1
2k
Primal Persuasion: How to Engage the Brain for Learning That Lasts
Avatar for Mike Taylor tmiket
0
340
Writing Fast Ruby
Avatar for Erik Berlin sferik
630
63k
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
1
120
The Organizational Zoo: Understanding Human Behavior Agility Through Metaphoric Constructive Conversations (based on the works of Arthur Shelley, Ph.D)
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
330
Information Architects: The Missing Link in Design Systems
Avatar for Michelle Chin soysaucechin
0
930
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
140
Lightning talk: Run Django tests with GitHub Actions
Avatar for Sarah Abderemane sabderemane
0
180
Fireside Chat
Avatar for paigeccino paigeccino
42
3.9k
Gemini Prompt Engineering: Practical Techniques for Tangible AI Outcomes
Avatar for Mfonobong Umondia mfonobong
2
390
Exploring the relationship between traditional SERPs and Gen AI search
Avatar for Ray Grieselhuber raygrieselhuber
PRO
2
4k

Transcript

  1. Baking Security
 In To Your Workflow Tim Nash - @tnash

  2. None

  3. What is security?

  4. Governance Security

  5. Who is responsible?

  6. YOU! [insert picture of crowd here]

  7. What’s in scope?

  8. Production

  9. Staging?

  10. Staging? Development?

  11. Global workplace?

  12. None
  13. None

  14. “I am not in the office at the moment. Send

    any work to be translated”

  15. Education, Education, Education

  16. Tooling

  17. Burp Suite OWASP Zap w3af sqlmap wfuzz Arachni

  18. Automating security

  19. You already do tests right?

  20. Mittn BDD-Security gauntlt

  21. Or use your existing tools

  22. Keeping Secrets Safe

  23. Vault credstash git crypt

  24. Logging and Audit trails

  25. Serverless Infrastructure

  26. Containers & Orchestration

  27. “Developers focus on solving a problem, security looks at what

    else those solutions can be used for” Mark Nunnikhoven

  28. Be a chaos monkey

  29. None

  30. Photo credits: Siobhan Hancock Daniel Foster David Goehring Jim Lukach

    Rich Savage Stephen Bowler Found Art Photography Martin Kriebernegg Alvaro Carou Jumilia

  31. WordPress Hosting Experts

  32. Tim Nash @tnash timnash.co.uk @34SP
 34SP.com