Speaker: Chelsea Komlo

Software Engineer @HashiCorp

Chelsea Komlo is a software/security engineer with a focus on distributed systems, open source software, and applied cryptography. She has worked across a variety of open source projects, and is a core Tor developer. Chelsea has lead cross-functional and cross-regional security initiatives and held trainings in both English and Spanish on operational security and privacy issues. Chelsea currently works at HashiCorp and is part of a team developing an open-source distributed scheduler.

Talk : Defense in Depth: In Depth

Track : Real World Security
Location : Majestic Complex, 6th fl
Day of week : Friday
Duration : 1:40pm - 2:30pm

Hindsight is often 20/20 for security vulnerabilities, and it is too easy to point fingers and cast blame when a security incident occurs. However, working to prevent a security compromise can feel like an unparalleled challenge, where no amount of planning can cover or foresee every point of failure that could lead to a devastating compromise.

While preventing security vulnerabilities can seem like a daunting task, practicing defense in depth is a useful place to start with. As attacks often leverage a chain of compromises, it can be nearly impossible to test for every failure case. Instead, developers, teams, and organizations can layer security techniques and practices to achieve an outcome where a single (or even multiple) vulnerabilities still limit what an attacker can ultimately achieve.

In this talk, we'll look at what defense in depth means from a variety of roles and perspectives- from developers practicing defensive coding to minimize common code vulnerabilities, to architects designing secure systems beyond just the perimeter, to building secure products for users who can't remember a 50-character password. We'll see how defense in depth can help organizations prevent unforeseen attacks and limit damage when compromises do occur.

Other talks from track Real World Security

Data Security Dreams and Nightmares
Founder and Chief Information Security Officer @HoldSecurity
Alex Holden
7 Strategies for Scaling Product Security
Senior Director, Application Security Engineering @Jet
Angelo Prado
Making Security Usable: Product Engineer Perspective
Security Focused Product Engineer @CossackLabs & Co-Organizer CocoaHeads Ukraine
Anastasiia Voitova
Engineering Secure Products at Facebook
Security Engineering Manager @Facebook NYC
Teddy Reed

Tracks

Schedule