DrupalCon Baltimore 2017: Death Star Security - Maintaining Agility and Security

This talk delves into building secure and scalable systems for Drupal, focusing on the importance of avoiding a "Death Star" security model where vulnerabilities exist due to over-reliance on a single security layer. The speaker emphasizes the need for defense in depth as systems integrate across various services worldwide, highlighting strategies like public key infrastructure, federated identity, capability-based security, and data encryption both in transit and at rest. The session is designed for projects of any size, offering real-world examples and lessons learned to foster a culture of security awareness among teams. Attendees will gain insights crucial for constructing robust architectures that protect against threats while ensuring flexibility for future service additions.