Can software engineers design security and is devsecops the silver bullet for applications security?

Stereotypes help us make quick decisions in various situations by following the crowd, and this is their main advantage.

Unfortunately, these decisions are not always correct or effective. Stereotypes in the field of information security have already caused many problems in various industries, and standard solutions need to be reevaluated.

What are these stereotypes? - we will talk about them in the presentation, and participants will be able to confirm or refute our observations using real-time polls.

What does the use of these stereotypes lead to, is it really a problem - and we will also discuss this, taking as an example some IoT system, such as a delivery drone. However, the problems are not limited to the IoT field, as every experienced developer will likely find similar issues in their project.

What shall we do then? We will briefly talk about the methodology of security by design, basic ideas, and patterns - in our opinion, these are ideas that developers can start applying today, possibly even on their existing technological stack. Applying these ideas will significantly reduce the risks of unacceptable events (damages) in case of successful attacks when (not if) they occur.

For those interested in delving deeper into the study of the methodology, we invite you to a free online mini-course on this topic.