Traditionally, security is all about creating obstacles and making it difficult to access data. This is at odds with our drive for a more smooth and faster development process. How can we keep the software we’re building secure without adding friction for engineers? Can security ever be something other than a costly nuisance?
In this talk, I’ll explain how to create a foundation for security by design, go over quick wins at the cross section of security and productivity that most companies overlook, and share my tips for building secure software without sacrificing productivity.
You’ll learn how to:
- Recognize patterns that promote security and those that hinder it
- Avoid wasting time implementing practices that make no sense
- Infuse a security mindset into your development process
- Understand what your CISO wants and when to push back
Interview:
What is the focus of your work?
I’m the CEO at Authress and our API makes it easy to add login and access control functionality into your software.
What’s the motivation for your talk?
When we were defining the security strategy for Authress, the common advice out there was either too rigid and impractical, or a very shallow regurgitation of what everyone does. Not much has changed in the last few years - the advice you get is still the same, but the number and intensity of attacks increased globally for everyone. I wanted to fill that gap with a pragmatic view focused on the why, so that security is more accessible for everyone.
Who is your talk for?
Leaders and practitioners in any sort of enablement role who are curious about security, and disgruntled security people who want a fresh perspective.
What do you want someone to walk away with from your presentation?
I’ll share multiple little tips on securing your development process and I’m hoping everyone will find at least one thing they can immediately apply in their teams. My biggest hope, though, is to impart a way of thinking about security that you can fold into your work that will let you figure out what makes the most sense in your situation.
What do you think is the next big disruption in software?
While everyone has their eyes on AI, we seem rather oblivious to the increasing fragmentation of global markets and how it’s spilling into the digital space. We’ll see way more arbitrary boundaries set by different countries, forcing us to rethink not just our business models, but also how we make our software.
Speaker
Dorota Parad
CEO @Authress, Product and Team Builder, Test Enthusiast
Dorota is the CEO at Authress, your developer-focused auth solution. With 18 years of experience in different software roles, from coding, testing, UX, through product and engineering management, to business operations, she brings a down-to-earth perspective to complex topics people prefer to avoid.
Find Dorota Parad at:
Date
Tuesday Nov 19 / 01:35PM PST ( 50 minutes )
Location
Seacliff ABC
