Security by default
summary
Argues that security shifts from a final gate to an ongoing cycle: adopt continuous delivery pipeline practices to get fixes from detection to production fast, use automated security testing in CI/CD, and swarm teams for rapid response and recovery. Treat risk as first-class with quantitative risk modelling (probability × cost) and do threat models and data privacy impact assessments. Move to a zero trust mindset by protecting small deployable components rather than a single perimeter, accept that attacks are a when not if and build diversity and repeatable lean cycles to limit damage.
AI-written summary · about
chapters (14)
- 0:00Intro
- 1:32Threats are different
- 4:11Traditional approach
- 5:34Zeroday attacks
- 6:41Data privacy
- 9:30Moores law
- 10:51Types of attacks
- 11:50Resilience
- 12:41Continuous Delivery
- 14:38Lean Security
- 16:00Continuous Security
- 18:16Risk
- 20:52Zero Trust
- 22:10Complexity
related talks
48mLevel Up Your Security Mindset
52mContinuous Security
01h 04mShifting Security Everywhere
57mMaking Security Priority Zero
40mMaking Security an integrated part of the SW Dev Lifecycle
22mShifting left, how security fits into the DevOps story
50mBuilding a continuous secure delivery pipeline
51mThinking Differently About Security