Whitepaper Review: Security by Design at Google (Category Architecture)

I read it recently. fancy whitepaper From Chirstoph Kern on the topic of security with a human face from Google, which talked about how to create secure software on a large scale. It is self-evident to security experts that security issues should be considered as an integral part of software product design, and adding security after product creation usually ends in failure. And what can be done with this author tells further. And if you spoil a little, the author notes that the security posture of software products and services is an emergent property of the developer ecosystem, within which applications are designed, implemented and deployed. Therefore, this ecosystem must be built in a certain way so that it can be made safe by design at the design and writing stage. In the whitepaper itself, there are many examples of how this is done at Google.

More details of the review can be found in my blog.

P.S. I've already participated in a couple of security podcasts where we discussed shift left security and secure by design.

• [SafeCode Live] Secure by design
• Code of leadership #15 - Interview with Roman Lebed about Information security

And he mentioned a few books.

• Building secure and reliable systems - I'm talking about her. told
• Agile Application Security

#Software #Security #Infosec #SystemDesign