The Pod: Security with Asymmetric Research
summary
Describes a new security program called STRIDE that launches a checklist website stride.asymmetric.re with 40 controls across eight pillars and a 1–4 maturity scale, created a month after the Drift hack where compromised developer laptops led to a two‑of‑five multisig takeover. Reports 20 kickoff calls, five guided assessments, plans for public scorecards for top TVL teams, and a Solana‑focused incident team dubbed SIREN/CERN with initial partners OtterSec, Neodyme, Squads, and Zero Shadow.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:02Post-Drift hack security
- 3:51STRIDE security framework
- 5:16STRIDE controls assessment
- 7:01Long-term remediation at CERN
- 9:47Joining STRIDE and CERN
related talks
52mContinuous Security
58mHow to embed security into your process
21mSecuring a Security Company
27mBridging the Dev-Sec divide: Three tips for agile developers
19mFrom Code to Cloud: Embedding Security
42mFrom Devops to DevSecOps
17mA Sneak Peak Into Security Reviews with the Community
37mSecurity Culture Hacking: Disrupting the Security Status Quo