ENSURING SECURITY - THE WAY HOW WE DO IT
summary
Describes a Nokia product security process that claims measurable improvement per release: regular threat risk analysis workshops that list assets attackers scenarios likelihood impact and mitigations; privacy risk assessments and feature documentation checks; static code review with a product-specific security checklist and vulnerability notification for third‑party components. Dynamic steps include IP/port enumeration with nmop, vulnerability scanning with open v, fuzzing (Su or Peach), web checks (w3f plus mum proxy or feedler) and manual penetration and exploratory testing before release.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:24Disclaimer
- 0:51Basic principles
- 5:17Methods and layers to test security aspects in Nokia Static testing • Threat and ris Threat and risk analysis
- 19:31Methods and layers to test security aspects in Nokia Static testing • Threat and risk analysis • Privacy assessment
related talks
58mHow to embed security into your process
40mIs Your Code Secure?: Automatic Security Analysis Tools and Systems
41mSecurity Touchpoints When Acquiring Soft...
10mHandling Security Issues
34mEmbarking on Your Security Journey
52mContinuous Security
32mCommSec D2 - ProdSec: A Technical Approach
38mBuilding a Security Assurance Program