👀CEO Stephen de Vries issues a first-year report card for CISA’s Secure by Design initiative. Read the article from Dark Reading. https://hubs.li/Q02zgPXY0 #cybersecuritystrategy #threatmodeling
IriusRisk’s Post
More Relevant Posts
-
Awareness raised and certain progressive adoption can be sensed based on the report but more needs to be done. Look forward to more detailed guide in #threatmodelling thats crucial in #securebydesign. #cybersecurity
CISA's Secure by Design Initiative at 1: A Report Card: https://lnkd.in/e7xSCdj7 by Stephen de Vries, co-founder & CEO, IriusRisk
CISA's Secure by Design Initiative at 1: A Report Card
darkreading.com
To view or add a comment, sign in
-
How can #organisations foster a stronger, safer, and more secure #IT community? Toby Sibley shares his thoughts with Infosecurity on how organisations can urge IT suppliers to demand security by design ⬇️
Time to demand IT security by design and default | PA Consulting
paconsulting.com
To view or add a comment, sign in
-
"Secure by Design" - It's a concept that makes perfect sense on the surface: build security into your systems from the get-go, right? But, as I've delved deeper into conversations with engineers, I've come to realize some intriguing misconceptions floating around. While I've been fervently advocating for secure design principles, there are some pervasive misconceptions that need to be addressed. Do give it a read in my latest blog and let me know your thoughts in comments or DM. I'm also open to connecting with you for a meaningful discussion on your experiences and strategies for implementing these principles. #securebydesign #shiftleft #threatmodeling
Debunking Common Misconceptions of Secure by Design
srajangupta.substack.com
To view or add a comment, sign in
-
The goal of our Prossimo project is to help make the Internet more secure by moving its critical infrastructure to memory safe code. So it’s great to see that memory safety is a centerpiece of Cybersecurity and Infrastructure Security Agency's updated Secure by Design white paper! You’ll find it listed as a top Secure-by-Design Tactic. #SecureByDesign
📢 CISA released the second version of its Secure by Design whitepaper. https://lnkd.in/g5PW5H-b Want to learn what’s new? Read on! #secureByDesign 🔐 We received a great deal of feedback from software companies large and small, industry groups, our JCDC partners, and of course our international partners. 🌐 The first version was co-sealed by 10 US and international partners, a record at CISA. For this version, 18 organizations co-sealed, demonstrating incredible interest across the globe in finding ways to make software more secure. 🖋️📜 We greatly expanded the section on the three principles: (1) Take ownership of customer security outcomes, (2) Embrace radical transparency, and (3) Lead from the top. We included more background on the principles, and also some sample artifacts that software manufacturers can use as evidence that they are evolving their processes in alignment with these secure by design principles. No one artifact alone will be fully convincing, but several of them together may start to paint a compelling picture. 🖼️ As the saying goes, the future is already here, it’s just unevenly distributed. We know that there are many examples of secure by design engineering happening today. 🏗️🔧⚙️🛠️🔐 We urge software companies to read the updated whitepaper, and to share publicly the ways in which they are making the secure by design transformation. Many thanks to Lauren Z., Jack Cable, Grant Dasher, Eric Goldstein, and of course Jen Easterly for making this initiative possible. 🙏 And a huge shout-out to External Affairs and their art department. Wow! 🧑🎨🎨 More information is available on our blog here: https://lnkd.in/g-ZkBTdi
Secure by Design | CISA
cisa.gov
To view or add a comment, sign in
-
CTO at ZorroSign Inc. | Expert in AI/ML, Blockchain, Quantum Computing, Cybersecurity & Secure Coding | Digital Security Innovator | Mentor & Trainer in Advanced Tech
Secure by Design products are those where the security of the customers is a core business requirement, not just a technical feature. Secure by Design principles should be implemented during the design phase of a product’s development lifecycle to dramatically reduce the number of exploitable flaws before they are introduced to the market for broad use or consumption.
Secure by Design | CISA
cisa.gov
To view or add a comment, sign in
-
Cloudflare, Inc. | Board Member | former Meta, Obama White House, USAID, WilmerHale, Foreign Service Officer
Security considerations should be an integral part of software’s design, not an afterthought. Find out how Cloudflare adheres to CISA’s Secure by Design principles to shift the industry. #SecurityWeek #SecureByDesign
Changing the industry with CISA’s Secure by Design principles
blog.cloudflare.com
To view or add a comment, sign in
-
<<Secure design isn’t just preventing the problems you can think of or that you’re having. It also doesn’t mean preventing problems that you’ve heard anecdotally that other people have thought of or might be having. Security is about economics. _One design is more secure than another if its risks and risk related costs are lower, which means some thought has to be given to the costs an attacker would have._ Changing a design for security reasons requires careful cost analysis of the defender’s alternatives, and careful benefit analysis of what the attacker’s alternatives would be. Goodness in defense comes from reducing the defender’s costs and possibly raising the attacker’s costs.>> (Vixie, 2013) https://lnkd.in/gwiUx4MN
On the Time Value of Security Features in DNS
circleid.com
To view or add a comment, sign in
-
All vendors claim their products are secure by design; but then define #securebydesign as what they currently do. This is not good enough if the government seriously wishes to make manufacturers responsible for their products. A common saying is, “If it ain’t legislated, it won’t happen.” The problem is how can you turn a definition into a requirement that can be measured, compared and regulated? https://lnkd.in/eXj8xsKa
Federal Push for Secure-by-Design: What It Means for Developers
securityweek.com
To view or add a comment, sign in
-
"Secure by Design & by Default" - How difficult is to attain most of those security principles. So obvious in intent and so complex in implementation. Moving the security burden to manufacturers is strategically the way to go, but the move will take long. Security design principles are not new, they always lead me to this 1975 paper by Shaltzer and Schröder https://lnkd.in/d87xUttZ Reading it you will find that IT changed so much since the 70's, but many principles remained. They already talked on "fail-safe defaults". They listed "least privilege" and "separation of privilege". I would also highlight the "open design": hiding the design details of security controls is nonsense.
Secure by Design | CISA
cisa.gov
To view or add a comment, sign in