Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Security survival skills (for the adventurous d...
Search
Laura Bell
April 24, 2015
Technology
0
100
Security survival skills (for the adventurous developer)
Laura Bell
April 24, 2015
Tweet
Share
More Decks by Laura Bell
See All by Laura Bell
DIY security for the amateur superhero
ladynerd
0
220
Hackcon 11 - Protecting our people
ladynerd
0
220
Security in a container based world
ladynerd
0
130
Securing Microservice Architectures
ladynerd
2
340
Better Connected
ladynerd
0
50
Continuous Security
ladynerd
3
1.1k
Automated Human Vulnerability Scanning with AVA
ladynerd
3
2.6k
Blindsided by security
ladynerd
0
78
Practical tools for privacy audit
ladynerd
0
170
Other Decks in Technology
See All in Technology
Oracle Cloud Infrastructure:2024年9月度サービス・アップデート
oracle4engineer
PRO
0
360
Oracle Database 23ai 新機能#4 Real Application Clusters
oracle4engineer
PRO
0
110
Causal Impactを用いたLINE Pay UIの効果検証とABテスト実施への貢献
lycorptech_jp
PRO
3
490
山手線一周のパフォーマンス改善
suzukahr
0
110
エムスリー全チーム紹介資料 / Introduction of M3 All Teams
m3_engineering
1
220
不感対策ソリューション
jtes
0
230
C# 13 / .NET 9 の新機能 (RC 1 時点)
nenonaninu
1
1.2k
【shownet.conf_】多様化するネットワーク環境を柔軟に統合するルーティングテクノロジー
shownet
PRO
0
280
k6を活用した再現性・拡張性の高い負荷試験基盤の構築
biwashi
11
3k
10Xでのデータ基盤の変遷とこれから: データマネジメントのリアル 〜BtoB企業3社の歩みとこれから〜
10xinc
6
1.2k
【shownet.conf_】持続可能な次世代Wi-Fi運用に向けて
shownet
PRO
0
260
業務ヒアリングと知識の呪い
tamai_63
0
130
Featured
See All Featured
Bootstrapping a Software Product
garrettdimon
PRO
304
110k
A Modern Web Designer's Workflow
chriscoyier
692
190k
The Psychology of Web Performance [Beyond Tellerrand 2023]
tammyeverts
38
2.1k
Adopting Sorbet at Scale
ufuk
73
8.9k
Keith and Marios Guide to Fast Websites
keithpitt
408
22k
It's Worth the Effort
3n
183
27k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
92
16k
Optimizing for Happiness
mojombo
375
69k
Learning to Love Humans: Emotional Interface Design
aarron
271
40k
Making Projects Easy
brettharned
114
5.8k
Imperfection Machines: The Place of Print at Facebook
scottboms
263
13k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
26
1.9k
Transcript
Security skills for the adventurous developer Laura Bell F O
U N D E R & L E A D C O N S U LTA N T S A F E S TAC K @ l a d y _ n e rd l a u r a @ s a fe s t a c k . i o
the world is a terrible place
the internet is a festering pool of toxic waste
None
somebody probably wants to do bad things to your computer
the security situation is beyond hope
None
we can build amazing things
None
None
None
doing this securely is hard
QQ
good adventures are supposed to be challenging
so stop waiting for someone to hand you these skills
on a plate
this is your adventure
let’s get started
prepare for the (inevitable) sequel protect your treasure build amazing
machines always have an escape route watch your back take the road well travelled prepare yourself plan your route (but keep it flexible)
prepare yourself
security starts with education
security is a team sport
plan your route (but keep it flexible)
design before implementation
examine all the options
security requires compromises
take the road well travelled
follow in someone else’s footsteps
know where to look for direction
expose yourself to scrutiny
build amazing machines
build amazing machines
security needs a robot army
immutable architectures help security
watch your back
know everything there is to know
use clever tools to build clever things
Watch for expensive distractions
more alarms and no surprises
security is the long game
watch for spies
always have an escape route
have a backup (plan)
be prepared to action it
store your backups securely
protect your treasure
know the value of what you have around you
vs. vs. value is relative
secure data starts with secure storage
so about those passwords?
secure systems need gatekeepers
prepare for the (inevitable) sequel
celebrate your successes
learn from your mistakes
prepare for the next adventure
the world is a terrible place
secure your own adventure
questions? Laura Bell F O U N D E R
& L E A D C O N S U LTA N T S A F E S TAC K @ l a d y _ n e rd l a u r a @ s a fe s t a c k . i o