Great software is secure software
summary
Central claim: developers must own security and defenders must make that ownership easy and unavoidable. Concrete prescriptions: coaching to teach secure coding and threat modeling, shared libraries that encapsulate crypto and auth, security-as-a-service endpoints for policy and telemetry, and CI-integrated scanning and gating so checks run where code lives. Outcome described: handoffs and audits disappear, teams ship at DevOps speed while quality gates catch flaws earlier, turning security from a blocking “no” into built-in, repeatable capability.
AI-written summary · about
related talks
31mHow to get everyone to get on board with software security: practical tips and suggestions.
40mMaking Security an integrated part of the SW Dev Lifecycle
47mSecurity is Everybody's Job
32mSoftware security as a force of nature
13mKeynote: Software Security: _You_ are the Calvary
34mSecure by design - the secret weapon of high-performing organisations
40mKEYNOTE: Delivering software that is secure & usable - who’s job is it?
23mContinuous Security