RightsCon Toronto 2018

More and more
products are rushing into the market, and many of them have at least
one thing in common: they are glaringly insecure. In this panel,
security experts will be asked to consider what elements make for a
viable product on the issue of security: at a minimum, what should
developers be considering and doing? To start, participants will be
given a hypothetical about joining the team for a start-up developing
a new super cool user-facing widget. They will be asked in the first
third of the session to create a list of the security practices they
think are most important from their co-founder perspective.
Participants will then be asked to change their perspective by drawing
randomly one of several roles: user, regulator, lawyer, and hacker,
and to supplement the list with new ideas that they brainstorm when
approaching the issue from this new perspective. In the second third
of the panel, participants will then be asked to try to rank the
different practices on a matrix, considering impact and urgency. The
final third will involve the audience, taking questions to test the
participants initial thoughts and assumptions.