An infinite set of security tools
summary
Argues that investment in people and engineering fixes beats another layer of endpoint or antimalware noise by delivering measurable risk reductions: prune old code so vulnerabilities are 100% mitigated when code is removed, rewrite risky C components into higher‑level languages to cut memory‑corruption bugs, centralize input validation to reduce reachability, compartmentalize networks and restrict channels, and speed patch rollout metrics so time to patch falls to 50% of prior windows. These changes are concrete and measurable.
AI-written summary · about
related talks
51mThinking Differently About Security
39mSoftware Security Engineering (Learnings from the past to fix ...)
46mRugged Software Engineering
39mProactive Security, less buzzword, more action
16mDesigning Holistic Security Programs
59mTeam of 30 million: Reducing Software Vulnerability at a Global Scale
57mMaking Security Priority Zero
01h 11m2024 Security BSides // Adam Pennington