#73 - Continuous Architecture (Part 3) - Security and Resilience - Eoin Woods

#73 - Continuous Architecture (Part 3) - Security and Resilience - Eoin Woods

“Because we ship stuff now almost immediately into public facing clients, almost as soon as we’re writing a line of code, we need to be thinking about how we make sure that it’s a secure line of code and it will be deployed and operated securely as well."

Eoin Woods is the co-author of “Continuous Architecture in Practice” and the CTO at Endava. In this last of a three-part series of “Continuous Architecture” episodes, Eoin shared the remaining two important quality attributes covered in the book, i.e. security and resilience. Eoin explained why we should treat security as a critical quality attribute, the changes in the security landscape that make security becomes more challenging, the threat modeling concept, how to do continuous threat modeling, and his 10 secure by design principles. Eoin then shared about resilience as a quality attribute, how we should differentiate resilience from high availability, some common resilience techniques that we can implement in our system, and the importance of embracing failure mindset.

Listen out for:

  • Career Journey - [00:05:42]
  • Software Architecture - [00:09:43]
  • Quality Attributes: Security - [00:12:19]
  • Security Landscape Changes - [00:14:08]
  • Availability as Security Objective - [00:18:59]
  • Threat Modeling - [00:20:51]
  • Continuous Threat Modeling - [00:23:59]
  • Secure by Design - [00:26:56]
  • Quality Attribute: Resilience - [00:31:14]
  • Resilience and High Availability - [00:33:38]
  • Resilience Techniques - [00:35:36]
  • Allowing for Failures - [00:40:18]
  • 3 Tech Lead Wisdom - [00:41:23]

_____

Eoin Woods’s Bio
Eoin is CTO at Endava, based in London. In previous professional lives, he has developed databases, created security software and designed way too many systems to move money around. Outside his day job, he is a regular conference speaker. He is interested in software architecture, software security and DevOps, and has co-authored a couple of books on software architecture.

Follow Eoin:


Our Sponsor

Are you looking for a new cool swag?
Tech Lead Journal now offers you some swags that you can purchase online.
These swags are printed on-demand based on your preference, and will be delivered safely to you all over the world where shipping is available.
Check out all the cool swags by visiting https://techleadjournal.dev/shop.


Like this episode?
Subscribe on your favorite podcast app and submit your feedback.
Follow @techleadjournal on LinkedIn, Twitter, and Instagram.
Pledge your support by becoming a patron.
For more info about the episode (including quotes and transcript), visit techleadjournal.dev/episodes/73.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(279)

Software Engineering Laws Every Developer Must Know in the AI Era - Milan Milanovic

Software Engineering Laws Every Developer Must Know in the AI Era - Milan Milanovic

Does moving faster with AI mean you get to skip the laws that governed every software project before it? Milan Milanovic argues the opposite, the old laws of software engineering now apply twice as ha...

10 Aug 1h 1min

Signals & Levers: Systems Thinking to Navigate Software Delivery Illusions - Elisabeth Hendrickson & Joel Tosi

Signals & Levers: Systems Thinking to Navigate Software Delivery Illusions - Elisabeth Hendrickson & Joel Tosi

(04:48) Brought to you by SpeechifyAITired of text-to-speech that sounds robotic or costs too much at scale? SpeechifyAI's new Simba 3.2 model ranks #1 on Artificial Analysis for realness, priced unde...

3 Aug 1h 17min

From Technical Debt to Triple Debt: The Hidden Cost of AI-Generated Code

From Technical Debt to Triple Debt: The Hidden Cost of AI-Generated Code

Is vibe coding quietly draining the thing that makes teams effective: their shared understanding? Margaret breaks down her new “triple debt” model, and why cognitive debt might be the one nobody’s tra...

27 Juli 1h 10min

Ex-Gojek CTO: Why the Age of AI Rewards Builders as Judgment Becomes Expensive

Ex-Gojek CTO: Why the Age of AI Rewards Builders as Judgment Becomes Expensive

If expertise is becoming almost free, why is judgment becoming the most expensive skill in tech? Ajey Gore, former Gojek CTO, explains why the age of AI agents rewards builders over typists.In this ep...

13 Juli 1h 22min

The AI Productivity Paradox: Why 10X Output Doesn't Mean 10X Business Outcome

The AI Productivity Paradox: Why 10X Output Doesn't Mean 10X Business Outcome

What if optimizing for AI output is actually slowing your company down? When code becomes nearly free to produce, the organizations still measuring productivity by output are solving the wrong problem...

29 Juni 1h 5min

The Hidden Stories Sabotaging Your Culture Change

The Hidden Stories Sabotaging Your Culture Change

Why do 70% of change efforts fail — even when leadership is fully committed? The answer isn’t strategy or resources; it’s the hidden stories people unknowingly carry that silently block every initiati...

15 Juni 1h 8min

Creator of Meta's Hack: Your AI Will Always Cheat — Here's How to Stop It

Creator of Meta's Hack: Your AI Will Always Cheat — Here's How to Stop It

What if your AI coding agent is quietly cheating on your tests — and how do you stop it? Julien Verlaguet, who built the type system Meta used to migrate tens of millions of PHP lines, is now building...

8 Juni 1h 18min

Eric Ries: Why Good Tech Companies Go Bad, and How to Stop It

Eric Ries: Why Good Tech Companies Go Bad, and How to Stop It

Why do companies with the best intentions end up betraying their customers, employees, and mission? Eric Ries calls it “financial gravity” — an invisible force that pulls even the most principled comp...

1 Juni 1h

Populärt inom Teknik

uppgang-och-fall
market-makers
skogsforum-podcast
rss-uppgang-och-fall
rss-elektrikerpodden
rss-laddstationen-med-elbilen-i-sverige
 och-bilen-gar-bra
elbilsveckan
natets-morka-sida
rss-en-ai-till-kaffet
developers-mer-an-bara-kod
bosse-bildoktorn-och-hasse-p
rss-veckans-ai
bli-saker-podden
rss-fabriken-2
rss-upplyst-entreprenordirektor
rss-jonas-jaani-podcast
rss-milpodden
hej-bruksbil
garagehang