Program like a hacker, defend like a programmer
summary
Describes modeling an application the way an attacker does: maintain a changing mental model of critical execution points, ways to influence them, and expected app reactions. Explains representing the attacker's possible actions as an attack tree (set of reachable paths) and discusses using that perspective to program like a hacker and defend like a developer.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 2:55Security training problem
- 10:04Developer vs hacker mindset
- 16:24Vulnerabilities as bugs
- 27:00Five protection principles
- 35:30Q&A
related talks
48mFrom Developer to Hacker: Knowing How to Break Is Knowing How to Protect ⚔️
44mFrom Developer to Hacker: Knowing How to Break Is Knowing How to Protect ⚔️
33mLearn to Think Like a Hacker
45mHacking and protecting Android apps
51mApplication Threat Modeling Implementation Tips and Tricks
48mThink and Act Like a Hacker to Protect Your Company’s Assets
42mDefensive programming or the art of not trusting yourself
58mThreat Modeling Developer Behaviour: The Psychology of Bad Code