Security
summary
Advocates a concrete shift: adopt seven principles including designing for a zero‑trust world, doing early risk modelling to produce an MDSP (minimum viable secure product), and adding environment checks, obfuscation, encryption and tamper‑proofing rather than bolting security on at release. Cites experience with 1,000 customers in 72 countries and warns of 18 million daily malware/phishing detections; recommends countering dynamic analysis with runtime protections and anti‑instrumentation measures (Frida/Xposed style).
AI-written summary · about
chapters (10)
- 0:00Introduction to security by design
- 1:37Zero trust world explained
- 6:39Security as continuous process
- 9:29Security everyone's responsibility
- 12:41Balancing security and usability
- 19:05Avoid reinventing the wheel
- 21:21Keep frameworks simple and clear
- 23:09Depth in security layers
- 27:00Seven principles recap
- 28:04Q&A on security best practices
related talks
27mSecurity by Design
48mSecurity Basics for Developers (and Not Only Developers)
50mAttack Your Apps Before the Bad Guys Do
40mSecurity by UX Design
18mDesigning for Security Outcomes
34mSecure by design - the secret weapon of high-performing organisations
18mSecurity in the App Era: Building Strength for an Interconnected World
23mSecurity Doesn't Have To Be a Nightmare