Dataflow tabular charts -- a presentation tool for security architects
Action | Key |
---|---|
Play / Pause | K or space |
Mute / Unmute | M |
Select next subtitles | C |
Select next audio track | A |
Show slide in full page or toggle automatic source change | V |
Seek 5s backward | left arrow |
Seek 5s forward | right arrow |
Seek 10s backward | shift + left arrow or J |
Seek 10s forward | shift + right arrow or L |
Seek 60s backward | control + left arrow |
Seek 60s forward | control + right arrow |
Decrease volume | shift + down arrow |
Increase volume | shift + up arrow |
Decrease playback rate | shift + comma |
Increase playback rate | shift + dot or shift + semicolon |
Seek to end | end |
Seek to beginning | beginning |
Share this media
HLS video stream
You can use an external player to play this stream (like VLC).
HLS video streamWhen subscribed to notifications, an email will be sent to you for all added annotations.
Your user account has no email address.
Information on this media
Links:
Number of views:
30Creation date:
July 4, 2022License:
CC BY-SA v4Description
Dataflow tabular charts are a new kind of drawings to show security boundaries crossed by functional dataflows. We will present the importance of those drawings for documenting security architectures, risk assessments, and penetration test results. We will then show a tool that can produce those charts automatically based on a textual description, similar to how msggen
creates message charts.
After studying electronics and computer architecture, Yves spent a decade developing embedded software, first in a small business, then at Airbus. He then moved on to the Airbus A350 design office to work on its security. There, he practiced supplier management, systems engineering, and security requirements for systems with critical, safety-related impacts. Since then he has worked on various topics related to security, from governance to formal proofs of security properties, in several industrial domains such as aeronautics, railway and automotive.
Unsatisfied with the lack of coding in the professional life of a security architect, he finds any excuse he can to develop new tools.
Other media in the channel "2022"
19 viewsClosingJuly 6th, 2022
51 views, 6 this year, 2 this monthkdigger: A Context Discovery Tool for Kubernetes Penetration TestingJuly 6th, 2022
44 views, 8 this year, 1 this monthDissecting NTLM EPA & building a MitM proxyJuly 6th, 2022
71 views, 17 this year, 3 this monthFinding Java deserialization gadgets with CodeQLJuly 6th, 2022
82 views, 10 this year, 2 this monthMobSF for penetration testersJuly 6th, 2022
78 views, 6 this year, 2 this monthImprove your Malware Recipes with CyberchefJuly 6th, 2022