Joern Freydank -- Security Design Anti Patterns Limit Security Debt

Joern Freydank is a Lead Cyber Security Engineer with more than 20 years of experience. He is currently establishing the Threat Modeling Program at a major insurance company. Joern joins us to talk about security design anti-patterns. He defines the term, explains security debt, reviews the categories of anti-patterns, and walks us through the example of a common role misconception. We hope you enjoy this conversation with... Joern Freydank is a lead cybersecurity engineer with more than 20 years of experience. He's currently establishing the threat modeling program at a major insurance company. You're about to listen to AppSec Podcast. When you're done with this, be sure to check out our other show, High Five.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Joern Freydank is a lead cybersecurity engineer with more than 20 years of experience.
→ Learn more about Security Journey

Connect with Joern Freydank:
→ Security Design Anti-Patterns -- Creating Awareness to Limit Security Debt (YouTube talk)
→ Stack Overflow

Mentioned in this episode:
→ Security Design Anti-Patterns -- Creating Awareness to Limit Security Debt (YouTube talk)
→ Stack Overflow

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Joern Freydank: Security Design Anti Patterns Limit Security Debt
03:04 You came to security from more of the breaking perspective
04:37 One of our topics that we're going to be talking about
07:19 It's missing pieces versus bad architectural decisions that are being laid
10:53 That's one of the things that, you know, I think about
13:11 Yeah. And I was thinking a similar, the trade-off with also
17:58 Talking about roles, we mentioned roles. There's a malicious insider admin
20:15 Yeah. And you think about the couple of examples you shared
21:49 Yeah, occasionally. Certainly. I mean, like you said, mostly from the
25:04 What's the corresponding pattern, essentially
27:13 As we start to kind of bring this conversation towards a
31:04 There's an awareness— I mean, there's an awareness play in that