ConfPad

Developing secure software at scale is a multifaceted challenge. It ranges all the way from detailed technical aspects such as picking a good password hash function, to software engineering cultural aspects such as treating security as software property just like quality. The challenge is even greater when facing a massive code base evolved by a large highly productive developer community. This session will give you an overview of methodologies for developing secure software, as well as an insight into how to integrate them in your development culture. This talk will also cover the developer perspective including real world examples of vulnerabilities our development teams have identified and fixed.