You got your design team in my security team!
summary
Argues that security lives at the system and human-impact level not the platform level, so systems not platforms is the guiding claim; notes lang sec doesn't fix everything and points to the infosec account Swift on security as a useful reference. Uses a banking example: attackers against browsers are irrelevant compared with attackers who steal money. Proposes three actionable shifts: center user outcomes, threat model by impact, and design to limit real-world harm.
AI-written summary · about
chapters (5)
related talks
28mSecurity Through Design - Making Security Better By Designing for People
18mDesigning for Security Outcomes
51mThinking Differently About Security
47mTransforming Security Through Design
46m“The System...Is People!” Designing Effective Security UX
33mInterview with
26mPlatform Engineering Loves Security: Shift Down To Your Platform, Not Left To Your Developers! - Maxime Coquerel, Royal Bank of Canada
16mDesigning Holistic Security Programs