Wiktoria Dalach
Software and Security Engineer, Writer
Berlin, Germany
Actions
Wiktoria Dalach is a Software/Security Engineer, a writer an a youtuber. She has been building apps for nearly a decade now. She has organized over 30 workshops for Webmuses, a community she co-founded in 2012. She's a RailsGirls mentor. Her interests focus on creativity, art and cybersecurity.
Area of Expertise
Topics
Security Doesn’t Have To Be a Nightmare
There are so many myths about security, and how difficult it is. Often devs choose to ignore it because they think that writing more secure code would take them ages. It is not true. Security doesn’t have to be scary. In my talk, I share 5 tips that can almost immediately make a product more secure.
Last year, after 9 years of writing code, I joined the application security team. During the transition process, I discovered that there are a few pieces of security theory that would have made my life as a developer much more painless if I had known them before.
- Always validate the input
- Do not commit credentials into your repository
- Use scanners to find vulnerabilities
- Learn CIA triad - Confidentiality, Integrity and Availability can be a useful framework to develop a security mindset. This is a simple yet powerful piece of theory. It can be a base of threat modeling of a whole project but can also work on a level of a single user story.
- When in doubt, ask your security team for help
After my talk, attendees will be equipped to write more secure code easier.
Great Security is One Question Away
After a decade of writing code, I joined the application security team. During the transition process, I discovered that there are many myths about security, and how difficult it is. Often devs choose to ignore it because they think that writing more secure code would take them ages. It is not true. Security doesn’t have to be scary. From my talk, you will learn the most useful piece from the Application Security theory. It will be practical and not boring at all.
Euruko 2022 Sessionize Event
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top