Explore the emerging discipline of product security leadership in this conference talk from Converge 2018. Gain insights into the role of a product security leader, covering topics such as security storytelling, defense strategies, DevOps integration, and essential skills for the field. Learn about threat modeling, realistic outcomes, and leveraging risks. Discover the importance of IT security operations experience, real-world examples, and lessons from epic fails. Delve into penetration testing, security unit tests, and key management features. Examine the challenges of defending unfixed vulnerabilities and the relevance of certifications. Understand the requirements for becoming a product security leader in an agile, continuous delivery environment. Address the security implications of the Internet of Things and the importance of fighting technical debt to maintain security relevance.
Overview
Syllabus
Introduction
What is a security story
What is product security
Defense
Catcher in the Rye
Dos and Donts
DevOps
Skills
Software Development
Spot the Risk
How to Leverage the Risk
Possible Outcomes
Threat Modeling
Realistic Outcomes
IT Security Operations
IT Security Operations Experience
DevOps SEC Ops
RealWorld Examples
Learning From Epic Fails
Learning From Failure
Penetration Testing
Training Conferences
Defending Unfixed Things
Security Unit Tests
Block Chain
Classic Cryptography
Dont Roll Your Own
Key Management Features
Certifications
What does it take
A product security leader
Agile Continuous Delivery
Deployment Agility
Internet of Things
Bits and Software
Fight Tech Debt
Security Relevance
Summary
