Speaker
Abstract
We have all heard "an ounce of prevention is worth a pound of cure" in medicine, but the security industry isn't so sure. This talk explores the forefront of simple and effective preventative strategies. Attendees should leave inspired to change their defaults and assumptions, and push vendors to do better.
Interview
I am starting a company to help developers manage the complexity of the cloud in a way that's secure and really helps them get their job done more effectively.
I would like to see security products that are more proactive in general. I've seen enough dashboards and problems that just add more work to people's plates. And really what I want to do is stimulate thought and point out good examples where we've really helped people to have security for free without having to go and do more work.
People that have used products for security, people that are buyers of security products, people who are thinking about building in-house security products. I think that we can all learn lessons from this and take it back and do a little bit better for our users and customers.
I would love it if everyone would go back and think about this and then build something or start an initiative to make everyone's lives easier.
Topics
QCon San Francisco 2022 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.
Part of the track
Practical Security Hosted by Julia Knecht Manager, Security Platforms Engineering @NetflixFrom the same track
Wednesday 26 October
10:35 Seacliff ABC Session Security A Big Dashboard of Problems Travis McPeak Founder and CEO @ResourcelyInc, previously @Netflix & @Databricks We have all heard "an ounce of prevention is worth a pound of cure" in medicine, but the security industry isn't so sure. This talk explores the forefront of simple and effective preventative strategies. 11:50 Seacliff ABC Session Security Scaling Defenses Amidst Evolving Threat Landscape Aditi Gupta Staff Security Software Engineer @Netflix Security services that defend against malicious or fraudulent traffic operate in an unpredictable and constantly evolving threat landscape. The dynamic nature of attack traffic means that as attacks evolve, our defenses must evolve too. 13:40 Bayview Session Security Vulnerability Inbox Zero Alex Smolen Director of Security @LaunchDarkly, previously Engineering Manager @Clever, Engineer @Twitter, Security Consultant @Foundstone You have a vulnerability problem. You run a scanner. Now you have two problems - vulnerabilities and a mess of scanner results to process. 14:55 Seacliff ABC Session Panel: Practical Security Aditi Gupta, Travis McPeak, Nimisha Asthagiri, Alex Smolen Join us to continue the conversation around the track theme of practical security, the panel discusses current and future challenges and security issues facing security engineers, practitioners and organizations. 16:10 Ballroom BC Session Security Privacy-First Re-Architecture Nimisha Asthagiri Principal Consultant @Thoughtworks, Previously Chief Architect & Senior Director of Engineering @edX The tech industry grew organically the last few decades. We built new innovations on top of old. We evolved systems and technologies to meet new challenges. Decisions of the past became assumptions of today.