Bigger, Faster and More Secure
•
0 j'aime•120 vues
Video and slides synchronized, mp3 and slide download available at URL https://bit.ly/2IG56Qw. Laura Bell talks about how security can look when it stops being about fear and starts being a tool for building systems of the future. Filmed at qconlondon.com. Laura Bell is the founder of SafeStack, a specialist security training, development, and consultancy firm. With almost a decade of experience in software development and information security, she specializes in bringing security survival skills, practices, and culture into fast paced organizations of every shape and size.
Recommandé
Recommandé
Contenu connexe
Plus de C4Media
Plus de C4Media (20)
Dernier
Dernier (20)
Bigger, Faster and More Secure
- 2. InfoQ.com: News & Community Site Watch the video with slide synchronization on InfoQ.com! https://www.infoq.com/presentations/ security-future-systems • Over 1,000,000 software developers, architects and CTOs read the site world- wide every month • 250,000 senior developers subscribe to our weekly newsletter • Published in 4 languages (English, Chinese, Japanese and Brazilian Portuguese) • Post content from our QCon conferences • 2 dedicated podcast channels: The InfoQ Podcast, with a focus on Architecture and The Engineering Culture Podcast, with a focus on building • 96 deep dives on innovative topics packed as downloadable emags and minibooks • Over 40 new content items per week
- 3. Purpose of QCon - to empower software development by facilitating the spread of knowledge and innovation Strategy - practitioner-driven conference designed for YOU: influencers of change and innovation in your teams - speakers and topics driving the evolution and innovation - connecting and catalyzing the influencers and innovators Highlights - attended by more than 12,000 delegates since 2007 - held in 9 cities worldwide Presented at QCon London www.qconlondon.com
- 4. In this talk Fear and loathing Examining the root of fear and it’s effects Fear-based architecture and antipatterns Fear leads to anger, anger leads to hatred…. Fearless security patterns and approaches Deconstructing the scared and building the secure
- 7. Words Matter Threat Intelligence Kill Chain Advanced Persistent Threat Cyber War Zero-day Threat actor Firewall Brute-force Weaponized content
- 8. The more scared we are The more scared we get
- 9. In a nationally representative sample of Americans (fear increased risk estimates and plans for precautionary measures;
- 12. Because these cues were associated with previous danger, the brain may see them as a predictor of threat.
- 14. Castles
- 16. Layered defences create an expectation of safety, managed by someone or something else.
- 17. Defences can be challenged by Deployment Integrations Deconstruction Distribution
- 18. Gatekeepers
- 20. Gatekeepers place the responsibility on the user to prove that they are not malicious
- 21. Innocent people try hard to be honest and incriminate themselves Malicious people follow the rules, don’t draw attention
- 23. Scar Tissue
- 25. Scar tissue is a defence that forms where we have previously been hurt
- 27. Signs that your defence might be scar tissue Not-measurable Acute Useless Specific Exclusionary Arbitrary
- 30. Small, simple and focused on functionality
- 34. Guardians monitor and respond
- 36. Honey pit: An intentional vulnerability in an application that traps an attacker Bermudez Honey pot: An intentionally vulnerable host in a network that alerts when attacked https://canary.tools
- 38. Be aware and challenge your own bubble
- 39. Build defences that Focus on usability and accessibility Allow for monitoring and response Subject to regular evaluation
- 41. TL;DR Fear and loathing Examining the root of fear and it’s effects Fear-based architecture and antipatterns Fear leads to anger, anger leads to hatred…. Fearless security patterns and approaches Deconstructing the scared and building the secure
- 43. Watch the video with slide synchronization on InfoQ.com! https://www.infoq.com/presentations/ security-future-systems