Level Up Your Security Mindset
summary
Argues that security needs a concrete mindset shift: prioritize engineering security by default, measure risk reduction instead of chasing worst‑case scenarios, and align goals with product and business teams. Recommends concrete practices: regular brainstorming and prototypes, teach threat modeling, create security champions, add self‑service controls, automation and DevSecOps pipelines, and push vendors for baselines. Warns about scale problems such as unpatchable IoT in cars and refrigerators, doubts bug bounties as a replacement for structured secure development, and flags a multi‑million person skills gap.
AI-written summary · about
chapters (37)
- 0:00Intro
- 2:54CHALLENGES
- 3:31WHERE ARE WE AT
- 7:07OUR JOBS WILL GET HARDER
- 7:28HACK THE PLANET BETTER?
- 8:41WORLD RUN BY SECURITY PEOPLE
- 10:26WHAT IS OUR MISSION?
- 10:52DEFENSE
- 14:03REAL RISK
- 16:21THROUGHOUT THE YEARS
- 16:48THAT WON'T WORK HERE
- 17:25PERSPECTIVE SHIFT
- 18:28SOCIAL SKILLS
- 18:44SOFT SKILLS
- 20:01ROADBLOCK
- 20:58PEBKAC
- 21:09SCARY CLOUDS?
- 21:54BLOCKCHAIN!
- 22:05USER PROBLEMS
- 22:41CAN'T BE EVERYWHERE
- 22:58WORKING TOGETHER
- 23:29THE BIG SECRET
- 23:55ALIGN GOALS
- 26:08SILOS
- 29:20BRAINSTORMING
- 30:16PROTOTYPES
- 30:55EVERYTHING IS SMART
- 37:47OBLIGATIONS
- 38:23SIMPLIFICATION AND INCENTIVES
- 39:19LEVERAGE VELOCITY
- 40:26GOING TO 11
- 40:46BUG BOUNTIES WON'T SAVE YOU • Neither will Al or Blockchain
- 41:24OUR PROBLEMS ARE GLOBAL
- 41:50CYBERSECURITY SKILLS GAP
- 43:34INTERNSHIPS
- 44:18THE BUSINESS
- 45:24RETAIN AND DIVERSIFY
related talks
51mThinking Differently About Security
24mSecurity by default
01h 04mShifting Security Everywhere
48mHow to build a security mindset
57mMaking Security Priority Zero
52mHow to Transform Developers into Security People
40mMaking Security an integrated part of the SW Dev Lifecycle
38mPrioritizing Trust While Creating Applications