Bigger, Faster and More Secure
summary
OWASP Top Ten problems persist since 2004 and a pen test finding shows 40% of bugs come from original founders, so the talk argues change is overdue: replace brittle perimeter castles with component-level defenses — castles to tiny houses — deploy small, measurable controls, add monitoring and honeypots, assume failures, and automate dependency checks. Surprising national data: New Zealand has 435 security pros and 35 pen testers (average team 1.7, largest 19). Treat infrastructure like meerkat guardians that alert and collaborate.
AI-written summary · about
chapters (9)
- 0:00Start
- 4:08Words Matter Threat Intelligence Kill Chain Advanced Persistent Threat Cyber War Zero-day Threat actor Firewall Brute-force Weaponized content
- 6:45Fight Flight Freeze
- 10:51Layered defences create an expectation of safety, managed by someone or something else.
- 11:59Defences can be challenged by Deployment Integrations Deconstruction Distribution
- 13:33Gatekeepers place the responsibility on the user to prove that they are not malicious
- 14:01Innocent people try hard to be honest and incriminate themselves Malicious people follow the rules, don't draw attention
- 19:28Fearless security patterns and approaches
- 25:01Small Frequently deployed Independent Monitored Consistent Assume failure Evaluated and updated
related talks
44mApplication Security: Everything we know is wrong
30mTop 10 Introduction
22mAre you safe from OWASP #11?
47mOWASP Top 10
52mContinuous Security
59mTeam of 30 million: Reducing Software Vulnerability at a Global Scale
27mHow Security, Development & Testing can work together to stop ...
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time