Talk: Protecting sensitive data in modern multi-component systems

Modern applications are huge and different, but they all operate sensitive data. We will go through a typical security decision map most developers handle in their apps/infrastructures. We will illustrate typical data protection patterns: from “everyone knows everything” to “end to end encryption”. We will look and learn how to select appropriate security controls based on the use-case and the threat model.

The goal of the talk is to give a general thinking framework and enough ideas about tools for senior engineers to plan their solutions securely, regarding sensitive data contained within.