Secure-by-Design: How do you Design with a Security Mindset for the User? By Christine Bejerasco
visit https://2023.swisscyberstorm.com/sche... & https://www.swisscyberstorm.com for more information
The following summary was machine generated from the YouTube transcript and then reviewed by human eyes. If you spot any errors, please comment below.
Summary
Presenter: Christine Bejerasco
Title: Secure-by-Design: How do you Design with a Security Mindset for the User?
Category: SCS2023
Subcategory: Regular
Video: • Secure-by-Design: How do you Design with a...
Length: 29:27
Content: Christine Bejerasco discusses the importance of designing technology with a security mindset for users. She reflects on historical technological advancements, the integration of digital and physical worlds, and the evolution of cybersecurity threats. Christine emphasizes the need to understand human interaction with technology and suggests strategies for building secure systems.
Keywords
Cybersecurity
Technology design
Human interaction
Threat modeling
Secure-by-design approach
Ideas
Humans as the weakest link in cybersecurity: Christine challenges the notion, highlighting the disconnect between technology design and human behavior.
Evolution of technology complexity: She discusses the transition from simple, offline systems to interconnected digital and physical worlds, raising concerns about security implications.
Importance of threat modeling: Christine advocates for integrating threat modeling beyond technical teams, emphasizing its role in identifying and mitigating risks across organizational processes.
Role of technology in enhancing security: She explores the potential of technology, such as AI, in augmenting human capabilities and improving security measures.
Tailored cybersecurity awareness programs: Christine suggests personalized training programs for different organizational roles to address specific vulnerabilities and promote a culture of security.
Quotes
"Humans are the weakest link in cybersecurity, but is it really so or is it a matter of us not thinking about how humans interact with these Technologies?"
"Whenever there are Technologies, threats will always follow because when we only design for users and not think about how it can be misused and the misusers, then we end up not really anticipating the potential misuse of these things."
"It's all about raising the bar when it comes to the costs of the attack."
Facts
Complexity in technology design: Christine discusses the challenge of building upon existing complexity in technology, leading to potential security vulnerabilities.
Impact of historical technological advancements: She reflects on past innovations like AOL Instant Messenger, highlighting their contribution to mainstream technology adoption and subsequent security risks.
Role of open-source code: Christine acknowledges the significant impact of open-source initiatives on technological innovation while recognizing the associated security challenges, such as supply chain attacks.
Resources
Book: "Thinking, Fast and Slow" by Daniel Kahneman - Christine references the book to illustrate how technology can influence human behavior and the potential role of AI in cybersecurity.
Recommendations
Prioritize quality over quantity in cybersecurity awareness programs to effectively address organizational vulnerabilities.
Involve diverse teams in threat modeling exercises to identify and mitigate risks across various organizational processes effectively.