Secure Designs, UX Dragons, Vuln Dungeons - Jack Cable - ASW #328 Application Security Weekly (Video) podcast

Content provided by Security Weekly Productions and Security Weekly. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Security Weekly Productions and Security Weekly or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Application Security Weekly (Video) »
Secure Designs, UX Dragons, Vuln Dungeons - Jack Cable - ASW #328

12h ago 44:08

MP4•Episode home

In this live recording from BSidesSF we explore the factors that influence a secure design, talk about how to avoid the bite of UX dragons, and why designs should put classes of vulns into dungeons.

But we can't threat model a secure design forever and we can't oversimplify guidance for a design to be "more secure". Kalyani Pawar and Jack Cable join the discussion to provide advice on evaluating secure designs through examples of strong and weak designs we've seen over the years. We highlight the importance of designing systems to serve users and consider what it means to have a secure design with a poor UX. As we talk about the strategy and tactics of secure design, we share why framing this as a challenge in preventing dangerous errors can help devs make practical engineering decisions that improve appsec for everyone.

Resources

Show Notes: https://securityweekly.com/asw-328

657 episodes

#Tech #Applicationsecurityweekly #Keithhoodlet #Paulasadoorian #Sdlcsecurity #Technology #Tech News #Security Weekly #News #Video #Security Weekly Productions #AppSec #asw #DevOps