Your Secrets are Showing - How to Find if Your Developers are Leaking Secrets

Discover how to identify and prevent developers from leaking sensitive information in this 24-minute conference talk from Security BSides San Francisco. Explore the cache of valuable data that developers often leave exposed, which attackers can exploit to gain access to critical information or infiltrate target environments. Learn about tools available to both developers and InfoSec professionals for detecting and preventing information leakages. Gain insights into the potential security risks associated with source code repositories, both within corporate firewalls and on public hosting platforms like GitHub and Amazon AWS. Understand the importance of not only prevention but also detection in maintaining a secure development environment. Prepared by LLNL under Contract DE-AC52-07NA27344, this talk emphasizes the critical need for organizations to proactively address the issue of information leakage in their development processes.