Baking Security into your workflow - Early

A more Developer focused security talk, about security and automation.

Transcript

1. Baking Security
 In To Your Workflow Tim Nash - @tnash
3. What is security?
4. Governance Security
5. Who is responsible?
6. YOU! [insert picture of crowd here]
7. What’s in scope?
8. Production
9. Staging?
10. Staging? Development?
11. Global workplace?
14. “I am not in the office at the moment. Send any work to be translated”
15. Education, Education, Education
16. Tooling
17. Burp Suite OWASP Zap w3af sqlmap wfuzz Arachni
18. Automating security
19. You already do tests right?
20. Mittn BDD-Security gauntlt
21. Or use your existing tools
22. Keeping Secrets Safe
23. Vault credstash git crypt
24. Logging and Audit trails
25. Serverless Infrastructure
26. Containers & Orchestration
27. “Developers focus on solving a problem, security looks at what else those solutions can be used for” Mark Nunnikhoven
28. Be a chaos monkey
30. Photo credits: Siobhan Hancock Daniel Foster David Goehring Jim Lukach Rich Savage Stephen Bowler Found Art Photography Martin Kriebernegg Alvaro Carou Jumilia
31. WordPress Hosting Experts
32. Tim Nash @tnash timnash.co.uk @34SP
 34SP.com