What Every Engineer Needs to Know About Security and...

Channel:

Google TechTalks

Subscribers:

348,000

Published on October 9, 2007 2:48:54 AM ● Video Link: https://www.youtube.com/watch?v=798BchVu9NQ

Duration: 49:09

4,927 views

9

Google Tech Talks
July 10, 2007

ABSTRACT

This talk discusses recent trends in security, and what every engineer needs to know to prevent the most significant emerging threats such as cross-site scripting and SQL injection attacks. Just as every engineer might use object-oriented design principles to achieve extensibility and re-usability, every engineer needs to employ principles such as the principle of least privilege, fail-safe stance, and protecting against the weakest link to achieve security. Instead of focusing on "tips" and "tricks" that allow you to "band-aid" the security of your systems, we discuss how to derive defenses based on the application of security principles, such that you...