Cracking the Code to Secure Software by Daniel Sawano and Daniel Deogun
613 views · Published 2 August 2017 · 47:26 · Indexed 25 October 2026
Channel: Devoxx · 2017 · Science & Technology
What is it that makes writing secure software so difficult? Why do we keep making the same mistakes over and over again? One challenge is that developers are busy delivering features and meeting deadlines – giving security requirements less priority. In this talk you’ll learn to use principles and mindsets from Domain Driven Design combined with a pinch of security awareness, to create secure code – while still focusing on your business features. You’ll learn the basic principles of Secure by Design and how to use concepts such as Domain Primitives and Entity Snapshots to harden your code. What a Domain DoS attack is, and how to incorporate security testing in your delivery pipeline. The ideas and tools presented are directly applicable in your daily work. Daniel Sawano Developer, architect, public speaker, and agile dude. Long-time builder of high-performance systems with a background in stock trading and gaming. Master of science and a Java programmer for 15+ years. Loves creativity, beautiful software, DDD, TDD/BDD and a whole bunch of other acronyms. Passionate about cloud computing, agile methodologies, and creating systems that are secure by design. Daniel spends most of his days as a senior software engineer at Avanza Bank. Daniel Deogun is a Coder and Quality Defender who brings order to a chaotic world of bits and bytes using good design and clean code. He fights security issues on a daily basis using magic spells from DDD and an overall security mindset. In his spare time, Daniel coauthors the book Secure by Design. As a developer, Daniel started to play with Java in 1997 and his extensive experience ranges from patient critical pacemaker systems to web applications to high performant software in the gaming industry. Combining this with his passion for teaching have made him a frequent speaker at international conferences. Daniel is currently a senior consultant at Omegapoint in Stockholm, Sweden.
More from this channel
-
32:13
Writing Groovy AST Transformations: Getting Practical in an hour! by Baruch Sadogursky
-
25:58
TweetWallFX - Behind the Scenes by Sven Reimers
-
29:44
Second generation "workflow managers" for big data by Alex Van Boxel
-
29:13
Secrets are secrets. Please maintain them as secrets by Alex Soto
-
2:13:40
JavaScript build pipelines with Gulp.js by Stefan Baumgartner
-
2:04:09
Powerful Metaprogramming Techniques With Groovy by Jeff Brown
-
2:38:32
Distributed Machine Learning 101 using Apache Spark from a Browser by Xavier Tordoir/Andy Petrella
-
2:36:21
Caching 101: Caching on the JVM (and beyond) by Alex Snaps/Louis Jacomet