Developers are from Mars, Security guys are from Venus
•
2 likes•1,801 views
This presentation was given at FeWeb.be in February 2017. The topic was how to reconcile developers and security people.
![2
$ cat ~/whoami.xml
<profile>
<real_name>Xavier Mertens</real_name>
<day_job>Freelance Security Guy</day_job>
<night_job>Hacker, Blogger</night_job>
<![CDATA[
www.truesec.be
blog.rootshell.be
isc.sans.edu
www.brucon.org
]]>
</profile>](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Viewers also liked (18)
Similar to Developers are from Mars, Security guys are from Venus
Similar to Developers are from Mars, Security guys are from Venus (20)
More from Xavier Mertens
Recently uploaded
Recently uploaded (20)
Developers are from Mars, Security guys are from Venus
- 1. Developers are from Mars, Security guys are fromVenus FeWeb - February 2017 1
- 2. 2 $ cat ~/whoami.xml <profile> <real_name>Xavier Mertens</real_name> <day_job>Freelance Security Guy</day_job> <night_job>Hacker, Blogger</night_job> <![CDATA[ www.truesec.be blog.rootshell.be isc.sans.edu www.brucon.org ]]> </profile>
- 3. 3 $ cat ~/.profile • I like (your) data • Playing “Active Defense” • I prefer t-shirts than ties • Geek and gadgets over!
- 4. 4 Agenda
- 5. 5 … Just one tip!
- 6. 6 Two Opposite Worlds “Developers think of ways to make great things” “Security people think of ways to break things”
- 7. 7 Two Opposite Worlds • Implement boring controls • Make our daily job difficult • Are paranoiac • Don’t know the business • Just write lines of code • Don’t have a clue about security • Have short deadlines • Blindly re-use code
- 13. 13 Threat Landscape Fasten your seatbelts…
- 14. 14 Threat #1 “Why attacking me? My $DATA aren’t relevant”
- 15. 15 Threat #2 “We are always a weakest point for someone else!”
- 16. 16 Threat #3 “Did you see that our competitors just launched a new web site with plenty of nice features?”
- 17. 17 Threat #4 “Do not reinvent the wheel!”
- 18. 18 Threat #5 “There is a app/module for that!”
- 19. 19 Threat #6 New gadgets… • IoT (“Internet of Terror”) • Sport wristband • Cars • Homes • TV, Fridges, • Wireless stuff (RF, BT, BTLE, LORA, …)
- 20. 20 Threat #7 More and more $DATA… • Do you need them? • Safely processed?
- 21. 21 Threat #8 “P I B K A C”
- 23. 23 Threat #10
- 24. 24 So… … how to improve security?
- 27. 27 Design Design
- 29. 29 Easy as 1, 2, 3 Many tools can be used by script kiddies…
- 30. 30 Scan All The Things!
- 31. 31 Win-Win • No dumb job • Challenging! • Reduced costs! • Time optimisation • Self-learning Developers:Security Guys:
- 32. 32 Conclusion “Thinking as a security guy can help you to make things that are (more) difficult to break!”