Software Testing Unleashed - QA, DevEx & Quality Engineering

Stop Inventing Your Own Encryption - Eoin Woods

Listen Later
Making Security a First-Class Citizen

🚀 Do you like the podcast? Then please rate and share it. And feel free to send feedback to [email protected]

"If you start thinking about security in the last 10% of your project, you're going to get 10% security." - Eoin Woods

In this episode I talk with Eoin Woods about integrating security from the start of software development. Eoin, an expert in software architecture, explains why security often gets overlooked until the last minute. We explore why engineers find security daunting and discuss making it a standard part of development. Eoin shares design principles like defense in depth and cautions against custom security solutions.

Eoin Woods is an independent consultant in the fields of software architecture, green software and software engineering. He is formerly the CTO of Endava, where he was responsible for software engineering and capability development for over 10,000 delivery staff across the world. Prior to Endava he has developed databases, created security software and designed way too many systems to move money around. Outside his day job he is interested in software architecture, software security and sustainable (or "green") software. He is a regular conference speaker, has co-authored three books on software architecture and was the recipient of the 2018 Linda Northrup Award for Software Architecture, from the Software Engineering Institute at CMU

Highlights:

  • Security designed in from the start delivers real protection; added at the end delivers 10% security.
  • Never build your own encryption or authentication—even expert-built security tools always have initial flaws.
  • Defense in depth means layering independent security mechanisms so breaking one doesn't give attackers everything.
  • Threat modeling is simply asking: what's valuable, who wants it, and how would they attack us?
  • Testers asking uncomfortable security questions early are more valuable than pen tests finding problems late.
    • ...more
    View all episodesView all episodes
    Download on the App Store
    Software Testing Unleashed - QA, DevEx & Quality EngineeringBy Richard Seidl | Software Development & Testing Expert