Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Baking Security into your workflow - Early

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
990
0

Baking Security into your workflow - Early

A more Developer focused security talk, about security and automation.

Avatar for Tim Nash

Tim Nash

January 01, 2017

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
470
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.4k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
70
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
410
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
HTTPS and You
Avatar for Tim Nash timnashcouk
0
1k
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
それはエンジニアリングの糧である：AI開発のためにAIのOSSを開発する現場より / It serves as fuel for engineering: insights from the field of developing open-source AI for AI development.
Avatar for nrs nrslib
1
820
RailsのValidatesをSwift Macrosで再現してみた
Avatar for Takuma Shimizu hokuron
0
150
20260313 - Grafana & Friends Taipei #1 - Kubernetes v1.36 的開發雜記：那些困在 Alpha 加護病房太久的 Metrics
Avatar for ChengHao Yang tico88612
0
250
Kubernetesでセルフホストが簡単なNewSQLを求めて / Seeking a NewSQL Database That's Simple to Self-Host on Kubernetes
Avatar for nnaka2992 nnaka2992
0
190
Codex CLIのSubagentsによる並列API実装 / Parallel API Implementation with Codex CLI Subagents
Avatar for 冨澤宝斗 takatty
2
770
最初からAWS CDKで技術検証してもいいんじゃない？
Avatar for アキキー | Akihisa Ikeda akihisaikeda
4
180
2026-03-27 #terminalnight 変数展開とコマンド展開でターミナル作業をスマートにする方法
Avatar for SUZUKI Masashi masasuzu
0
270
我々はなぜ「層」を分けるのか〜「関心の分離」と「抽象化」で手に入れる変更に強いシンプルな設計〜 #phperkaigi / PHPerKaigi 2026
Avatar for shogogg shogogg
2
750
AI 開発合宿を通して得た学び
Avatar for ニフティ株式会社 niftycorp
PRO
0
190
Redox OS でのネームスペース管理と chroot の実現
Avatar for isan isanethen
0
500
AI Assistants for Your Angular Solutions @Angular Graz, March 2026
Avatar for Manfred Steyer manfredsteyer
PRO
0
140
事業会社でのセキュリティ長期インターンについて
Avatar for inlet-back masachikaura
0
210

Featured

See All Featured
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
61
43k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
199
73k
Building Flexible Design Systems
Avatar for Yesenia Perez-Cruz yeseniaperezcruz
330
40k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
17k
Chasing Engaging Ingredients in Design
Avatar for Sebastian Deterding codingconduct
0
160
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
122
21k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
302
51k
DevOps and Value Stream Thinking: Enabling flow, efficiency and business value
Avatar for Helen Beal helenjbeal
1
160
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
225
10k
The untapped power of vector embeddings
Avatar for Frank van Dijk frankvandijk
2
1.7k
A brief & incomplete history of 
UX Design for the World Wide Web: 1989–2019
Avatar for Jason CranfordTeague jct
1
340
Making Projects Easy
Avatar for Brett Harned brettharned
120
6.6k

Transcript

  1. Baking Security
 In To Your Workflow Tim Nash - @tnash

  2. None

  3. What is security?

  4. Governance Security

  5. Who is responsible?

  6. YOU! [insert picture of crowd here]

  7. What’s in scope?

  8. Production

  9. Staging?

  10. Staging? Development?

  11. Global workplace?

  12. None
  13. None

  14. “I am not in the office at the moment. Send

    any work to be translated”

  15. Education, Education, Education

  16. Tooling

  17. Burp Suite OWASP Zap w3af sqlmap wfuzz Arachni

  18. Automating security

  19. You already do tests right?

  20. Mittn BDD-Security gauntlt

  21. Or use your existing tools

  22. Keeping Secrets Safe

  23. Vault credstash git crypt

  24. Logging and Audit trails

  25. Serverless Infrastructure

  26. Containers & Orchestration

  27. “Developers focus on solving a problem, security looks at what

    else those solutions can be used for” Mark Nunnikhoven

  28. Be a chaos monkey

  29. None

  30. Photo credits: Siobhan Hancock Daniel Foster David Goehring Jim Lukach

    Rich Savage Stephen Bowler Found Art Photography Martin Kriebernegg Alvaro Carou Jumilia

  31. WordPress Hosting Experts

  32. Tim Nash @tnash timnash.co.uk @34SP
 34SP.com