How Can My Software Development Be 'Secure by Design'?

Secure software development and operations begin at the design stage. The term “Secure by Design” encompasses various principles such as secure architecture patterns, threat modeling and awareness among developers, and much more.

In this presentation, we will explore how to implement a “secure by design” approach in the software development process, with a particular focus on agile DevOps processes. In these processes, the development team itself takes responsibility for the product’s security. Threat modeling has proven especially useful, both for considering security during the planning phase and for sharing knowledge within the team and building a security mindset. Gamification approaches, such as threat modeling card games, offer an accessible entry point even for teams without deep prior knowledge.

In the final part of the presentation, we will discuss how the essential automation for DevOps can be designed so that CI/CD does not become an entry point for attackers.