From Cockroaches to Marble Floors
summary
Argues that treating security flaws as ordinary defects cuts breach risk and raises product quality by aligning QA, DevOps and security around the same metrics and tools. Implements LGTM to LGTS pull‑request workflow, codifies rules into deployable checks, and measures build pipeline health (mean time to resolution/failure) instead of counting bugs. Ships end‑to‑end tests and faster environment provisioning using Cypress and Burp Suite, leans on infrastructure as code to reduce attack/failure surface and accelerate ideation→production.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:40The Encore
- 2:04Introductions
- 4:26Engineering IT Security
- 6:42Engagement with QA
- 7:43Bringing in Security
- 11:07Hunting Bugs
- 11:43The End User
- 12:00A Holistic Look
- 13:27Focus on the Entire Company
- 14:28Infrastructure as Code
- 15:41BSidesSF Philosophy
- 16:15Metrics
- 17:19Alignment
- 18:01Education
- 20:34Best Practices
- 23:43Code Review
- 27:47Outro
related talks
40mMaking Security an integrated part of the SW Dev Lifecycle
34mEmbarking on Your Security Journey
11mLove Your Security Engineer as Yourself
36mHow to build continuous security and embed it in your product
31mShifting Left Securely
26mBeyond Testing: Application Security in the Age of DevOps
45mBringing Security Testing To Development: How To Enable Developers To Act As Security Experts
23mTurbocharge your development with agile security