Angry Dev — what can a malicious developer do?
summary
The talk examines risks posed by malicious developers within a software project, arguing that internal developers can be a greater threat than external users. It discusses threat scenarios where insiders create or modify code, data, or file handling in harmful ways and implies designing defenses that consider developer-originated attacks rather than only external adversaries.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 6:05Developer as threat
- 12:53Direct developer threats
- 25:30Principle of least trust
- 35:53Code review and change audit
- 40:52Summary and final Q&A
related talks
30mDevelopers as a Malware Distribution Vehicle
48mFrom Developer to Hacker: Knowing How to Break Is Knowing How to Protect ⚔️
46mAre Developers the New Front Line of Security?
58mThreat Modeling Developer Behaviour: The Psychology of Bad Code
41mHackers vs. Devs - Attacking Dev Tools and Infrastructure
58mHackers vs Developers: Mobile Applications
44mFrom Developer to Hacker: Knowing How to Break Is Knowing How to Protect ⚔️
52mHow to Transform Developers into Security People