Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

PyCon 2016
June 01, 2016
Programming
6
910

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

PyCon 2016

June 01, 2016
Tweet

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
pycon2016
6
890
Brett Slatkin - Refactoring Python: Why and how to restructure your code
pycon2016
17
5.5k
Mike Graham - The Life Cycle of a Python Class
pycon2016
7
8.7k
Nathaniel Manista, Augie Fackler - Code Unto Others
pycon2016
0
490
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
pycon2016
0
730
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
pycon2016
0
330
Jake Vanderplas - Statistics for Hackers
pycon2016
17
4.7k
Daniele Procida - Documentation-driven development - lessons from the Django Project
pycon2016
4
830
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
pycon2016
0
500

Other Decks in Programming

See All in Programming
快速入門可觀測性
blueswen
0
370
KMP와 kotlinx.rpc로 서버와 클라이언트 동기화
kwakeuijin
0
140
range over funcの使い道と非同期N+1リゾルバーの夢 / about a range over func
mackee
0
110
Spatial Rendering for Apple Vision Pro
warrenm
0
110
テストコードのガイドライン 〜作成から運用まで〜
riku929hr
4
590
テスト自動化失敗から再挑戦しチームにオーナーシップを委譲した話/STAC2024 macho
ma_cho29
1
1.3k
return文におけるstd::moveについて
onihusube
1
1.1k
Go の GC の不得意な 部分を克服したい
taiyow
3
790
これでLambdaが不要に？！Step FunctionsのJSONata対応について
iwatatomoya
2
3.7k
nekko cloudにおけるProxmox VE利用事例
irumaru
3
430
Kaigi on Railsに初参加したら、その日にLT登壇が決定した件について
tama50505
0
100
Zoneless Testing
rainerhahnekamp
0
120

Featured

See All Featured
The Art of Programming - Codeland 2020
erikaheidi
53
13k
Being A Developer After 40
akosma
87
590k
Fontdeck: Realign not Redesign
paulrobertlloyd
82
5.3k
Gamification - CAS2011
davidbonilla
80
5.1k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
330
21k
Thoughts on Productivity
jonyablonski
67
4.4k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
169
50k
The Cost Of JavaScript in 2023
addyosmani
45
7k
Optimising Largest Contentful Paint
csswizardry
33
3k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
132
33k
Large-scale JavaScript Application Architecture
addyosmani
510
110k
Rails Girls Zürich Keynote
gr2m
94
13k

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com