Yet another interesting lecture on the world of programming languages at C1b3rWall Academy 2021. This time under the title “Shifting it to the left” by Borja Gonzalez Carro, who is Lead Security Analyst for IRIUSRISK SL. He is an IT professional with 20 years of experience, the last six oriented to cybersecurity. He practices different branches of cybersecurity and lately he focuses on application security and S-SDLC, Security by Design and Security by Default.
The aim of the Shift Left strategy is to bring security as far to the left as possible (as far upstream) in the project schedule. Security must be present throughout the software development life cycle (SDLC). Placing security to the left implies:
- Anticipating risks and security breaches.
- Saving time.
- Saving effort.
- Saving costs.
How can we develop more secure software?
Security by Design: Design secure and robust software components.
Security by Default: The default configuration of software components will be the most secure possible.
Leveraging techniques such as Threat Modeling: Identify potential threats even before writing a single line of code.
Threat Modeling
It is the identification and analysis of the attack surface of the entire space that our application or project has and is susceptible to attack. Threat Modeling allows for the early detection of threats, right up from the design phase.
It takes us to more technical but also more interesting terms. If you would like to learn more about this topic and other topics related to security and programming languages, don’t miss the opportunity to enroll in the C1b3rWall Academy program, which already has more than 50,000 participants from all over the world. You can also take it a step further and enroll in the next Master’s Degree in Cybersecurity at the University of Salamanca.
Juan M. Corchado 