Referred Link 

https://www.linkedin.com/posts/satya619_%F0%9D%90%92%F0%9D%90%9E%F0%9D%90%9C%F0%9D%90%AE%F0%9D%90%AB%F0%9D%90%A2%F0%9D%90%AD%F0%9D%90%B2-%F0%9D%90%8D%F0%9D%90%9E%F0%9D%90%9E%F0%9D%90%9D%F0%9D%90%AC-%F0%9D%90%80%F0%9D%90%9C%F0%9D%90%AB%F0%9D%90%A8%F0%9D%90%AC%F0%9D%90%AC-activity-7252518323026882560-7iJX

𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐍𝐞𝐞𝐝𝐬 𝐀𝐜𝐫𝐨𝐬𝐬 𝐭𝐡𝐞 𝐒𝐃𝐋𝐂

In today's fast-paced digital world, security must be embedded into every stage of the Software Development Life Cycle (SDLC). Software engineering leaders need to adopt a continuous security approach that integrates security into every workflow, rather than treating it as a separate concern for development and production.

𝐊𝐞𝐲 𝐚𝐫𝐞𝐚𝐬 𝐭𝐨 𝐟𝐨𝐜𝐮𝐬 𝐨𝐧:

- Build Secure Software: Incorporate security into developer workflows to create "secure by default" software. Use the right tools at every stage of the SDLC to maintain this security.

- Protect Development & Production Environments: Reduce attack surfaces with continuous risk analysis and tools that safeguard both environments.

- Secure the Software Supply Chain: Ensure integrity, traceability, and visibility by protecting internal/external code dependencies and access to development environments.

Collaboration between software leaders, security teams, and operations is essential for maintaining an integrated security strategy across the entire SDLC.

#SecurityPractices, #SDLCSecurity

A Blog Post by Bruce Schneier
Link

http://www.wired.com/politics/security/commentary/securitymatters/2009/07/securitymatters_0715

Don't try this at home if you're not very familiar with whatever encryption product you're using. Failure results in a bricked computer. Don't blame me.

Step One: Before you board your plane, add another key to your whole-disk encryption (it'll probably mean adding another "user") -- and make random. By "random," I mean really random: Pound the keyboard for a while, like a monkey trying to write Shakespeare. Don't make it memorable. Don't even try to memorize it.

Technically, this key doesn't directly encrypt your hard drive. Instead, it encrypts the key that is used to encrypt your hard drive -- that's how the software allows multiple keys.
So now there are two different users named with two different keys: the one you normally use, and some random one you just invented.

Step Two: Send that new random key to someone you trust. Make sure the trusted recipient has it, and make sure it works. You won't be able to recover your hard drive without it.

Step Three: Burn, shred, delete or otherwise destroy all copies of that new random key. Forget it. If it was sufficiently random and non-memorable, this should be easy.

Step Four: Board your plane normally and use your computer for the whole flight.

Step Five: Before you land, delete the key you normally use.
At this point, you will not be able to boot your computer. The only key remaining is the one you forgot in Step Three. There's no need to lie to the customs official; you can even show him a copy of this article if he doesn't believe you.

Step Six: When you're safely through customs, get that random key back from your confidant, boot your computer and re-add the key you normally use to access your hard drive.