Here are the notes from my Tulsa Tech Fest 2007 talk "Developing Software with Security in Mind".
I describe 10 rules that everyone should keep in mind while developign software:
- Learn about security or it will teach you.
- Security knowledge goes obsolete quickly.
- Your team should have a security geek (or more).
- Befriend the security researchers in your field.
- Despite knowledge, you will ship security bugs.
- Have security response plans in place.
- Security and usability will always be in tension.
- The perfect is the enemy of the good.
- Have open conversations about security.
- Sometimes there is no rule #10.
Updated 2007/10/21: Make link to slides not stop at the sign-in page.