Electrons to Clouds—One SDL to Rule the World from Hardware to the Cloud
summary
Covers instituting a full‑stack Security Development Lifecycle (SDL) that spans hardware through firmware to cloud services, naming full‑stack SDL as the focus. Discusses concrete SDL approaches, techniques, and challenges across human factors, technical controls, and process integration for organizations producing hardware and software products.
AI-written summary · about
chapters (14)
- 0:00Start
- 1:16Objectives
- 1:54Does one SDL rule the world?
- 6:31SDL layers of the technology stack
- 10:39Full-Stack SDL
- 21:12SDL by Example
- 24:59Our Approach for One SDL
- 29:35Supply Chain and SDL
- 30:56Human Element - Culture Shift
- 31:49Key Takeaways
- 33:33Applying To Your Organization - Immediate Steps
- 34:45Applying To Your Organization - Long Term
- 35:50Applying To The Industry - Transforming SDL
- 37:33Questions?
related talks
38mSecure Software Development Framework: Towards an SDL for all SDLCs
41mImplementing SDLC in Combat Conditions
22mBuilding SSDLC in an Enterprise Environment
47mCloud Computing: DevSecOps — security all the way
48mDesigning a Secure Software Development Lifecycle with DevOps
26mSimple Guide to Secure SDLC
57mDev-first security: From code to cloud, and back to code (PRT291)
40mMaking Security an integrated part of the SW Dev Lifecycle