Keynote: Software Security: _You_ are the Calvary
Talkat Open Source Summit Europe 2023 · on Thursday, 2023-09-21· at 09:15· Auditorium (Floor 2), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Claims that embedding security at design time removes most vulnerabilities and speeds delivery. Teams run four-hour whiteboard sessions where developers, architects and a security analyst do threat modeling and attack-surface mapping and decide fixes like encrypted links and single-use reset tokens. The result shows 50% fewer vulnerabilities, fixes taking two weeks instead of two months, and the product shipped 1.5 months early, proving shift-left security actually works.
AI-written summary · about
chapters (7)
- 0:00Introduction: developers' role
- 2:16Security by design benefits
- 5:25Open source responsibility
- 7:12Why attackers target vulnerabilities
- 9:04Security as software property
- 10:31Secure by Design and threat modeling
- 11:38Regulatory shifts in software design
related talks
40mKEYNOTE: Delivering software that is secure & usable - who’s job is it?
38mKeynote: Dumping Traditional Security Teams
01h 04mKeynote: Every Security Team is a Software Team Now
40mClosing Keynote: New Era of Software with modern Application Security
56mKeynote: AppSec: From Outsiders to Allies
03mGreat software is secure software
49mKeynote: CISO Perspectives
43mOpening Keynote - Flipping the script