Startup Security - Making Everyone Happy

Explore startup security strategies in this 47-minute LASCON conference talk. Learn how to integrate security measures without impeding progress or increasing developer workload. Discover open-source tools and automated processes for dependency, code, and infrastructure security. Gain insights into building security into the pipeline, approaching new technologies, and implementing proactive controls. Examine application and host security challenges, various technologies and languages, and security tools like CI pipeline, linting, fuzzing, and password hashing. Understand how to conduct security reviews, choose dependencies, and automate vulnerability checks. Dive into Amazon EC2 security best practices, including console access, policy conditions, and jumpboxes. Explore network structure, AWS alerts, logs, and infrastructure management using Packer, JSON, and Terraform. Learn about managing secrets and leveraging AWS Parameter Store for code deployment.