At Facebook’s annual F8 developers conference in San Francisco, executives shared small security tactics the company uses to avoid big problems down the line.
In the speech of CEO, Mark Zuckerberg, the subject is easily overshadowed by all the new toys developer company announced mass media. But during a break in the two-day conference is clear that security and stability of infrastructure is top of mind for Facebook, and several sessions provide guidance to members. ("Move quickly with a solid infrastructure," said Zuckerberg, its rotation in Silicon Valley Mantra, "Move fast and break things.")
Understandably, the F8 session detailing the security and privacy contains significantly fewer attendees than other sessions, signs, perhaps, considering that many companies still cyber security as an afterthought.
But companies would do well to look at how Facebook works exactly to avoid the kind of violation of data that wreaked havoc on Sony Pictures Entertainment. Facebook Hacker stung in the past, and the company clearly did not want to be subjected to further humiliation and public backlash.
Which is one reason why Jennifer Henley, director of security operations Facebook, emphasized during a conference how his company is working hard to better preserve safety practices in all aspects of the operation it. Every fall, Facebook hosts an event called Hacktober that security experts try to trick employees fall into common hacking tricks like phishing scams, malicious actors sending emails that mimic the real version to trick people into giving up confidential information.
During this event, Facebook security team is also dispersed in the office USB memories of the company and other media to the "confidential" tab to see which employees are tricked into entering their computer, Henley said. (With these devices, hacker can penetrate the enterprise infrastructure.) The Hacktober purpose is to "step Spark situation employee awareness," Henley said, so they remain wary of threats to the safety of employees.
Facebook security engineer offered safety tips Ted Reed, more technical. Reed recommends that conference attendees, especially the directors or managers to manage software development, for example encoders to eliminate secret or key tokens that may be lurking around in the source code of your company.
These can serve as a gateway for hackers to break the back of a company, Reed said. Developers are often unwilling to scan your source code security holes because of the time involved. But doing so can help prevent a potential violation data, he said.
For Facebook, it's all about creating a company culture that values safety to compensate for the opportunity to begin violated. Of course it is much easier said than done in a world that values agile practices in software development.
"It's hard," says Reed. "But it's very, very profitable
Comments
Post a Comment