[SafeCode Live] Secure by design

I just went to the tape. SafeCode Live releasewhere we talked about the approach Secure by design (SBD) Constructive safety in product development.

We talked interestingly about what it is, why it is necessary, what to do "if everything is already done unsafely", how to pump in safety and so on:)

There were four of us on stream. Alexey Fedulayev, Podcast host, Head of Safe Development Automation at Wildberries Sergey Rogachev, Head of Secure Platform Development at Kaspersky Lab.

• Ekaterina Rudina, an analyst at Kaspersky Lab. Works in the Department of Advanced Technologies in the field of threat research, modeling and risk assessment.
• and the author of this channel

It was quite unusual to act this time not as an expert, but rather as a guest who is interested in having security practices present in the SDLC and not in the final stage, but starting with requirements, risk assessment, solution design and so on. As a result, I myself enjoyed listening to other speakers and even added to my reading list a couple of books that they recommended, but I decided to start with a basic one.Software SecurityMathias Payer, which Sergey recommended.

#Security #SRE #Software #SoftwareDevelopment #SoftwareArchitecture #DistributedSystems #Architecture