Главная
Study mode:
on
1
DIY SECURITY FOR THE AMATEUR SUPERHERO
2
the internet is a festering pool of toxic waste
3
somebody probably wants to do bad things to your computer
4
You are part of the problem
5
Listen to people (like OWASP and Troy Hunt)
6
Admit your mistakes (perfect people are liars)
7
Use a password manager (and here's why...)
8
not all technologies have mature libraries, frameworks and documentation
9
Oh noes.. a wild demo appears OWASP Dependency Checker Libraries.io
10
You won't see it coming (if you're not looking)
11
Choose the right tools for the job you are doing
12
ALL the things... Application Database Operating system Border devices Cloud tools
13
Which of your tools is you destruction?
14
Be kind demo gods... please LastPass Lambda Logs Sumo Siemonster and ELK
15
Other people's APIs make kittens cry
16
Complexity and fragmentation can be the cost of DIY
17
Custom filter languages are real
18
You are not John McClane (Incident Response skill isn't innate)
19
we need Blameless Security Culture
Description:
Explore DIY security approaches for application and operations environments in this 58-minute conference talk. Learn to become a security superhero by managing vulnerabilities, integrating security into builds, and implementing effective monitoring strategies. Discover how to defend against elegant attacks, navigate the challenges of the internet's toxic landscape, and protect your data using engineering skills. Gain insights into password management, dependency checking, and choosing appropriate security tools for various components of your system. Understand the importance of admitting mistakes, fostering a blameless security culture, and preparing for incident response. Delve into topics such as OWASP guidelines, cloud tools, API security, and the complexities of custom filter languages. Acquire practical knowledge to tackle security challenges and safeguard your applications in today's digital world.

DIY Security for the Amateur Superhero

NDC Conferences
Add to list