Preaching to more than just the choir: Working with developers to improve security
Yair Silbermintz at BSides Delaware 2019
If we want to deliver secure products, security professionals need to learn to work closely with engineering teams & tools.
In this talk I will discuss how engineering teams work, what motivates developers, and how to raise security concerns in ways developers will understand. I’ll go into often overlooked opportunities presented by processes & tools where infosec can accomplish some big wins. I’ll also cover some areas where security can help engineering teams achieve their goals while also delivering better security at the same time.
@MisterGlass
In this talk I will discuss how engineering teams work, what motivates developers, and how to raise security concerns in ways developers will understand. I’ll go into often overlooked opportunities presented by processes & tools where infosec can accomplish some big wins. I’ll also cover some areas where security can help engineering teams achieve their goals while also delivering better security at the same time.
@MisterGlass