Content: 
 

The principle of psychological acceptability has been neglected for long in IT in general, and therefore in cyber security as well. However, it gained more and more momentum in the last years: we are not willing to pay just any price anymore for some increase in security. In this webinar we will break some of the common misconceptions and see some new trends in password management, aligned to the NIST recommendations. Security needs a preventative mindset. Develop one and make secure coding a second nature!

​

In this webinar you will learn:

​

• About the cat and mouse game of software security

• Why a lot of developers are doing password management wrong

• Which password guidelines are actually helpful in practice

• The best practices to follow when designing your password policy

• How Cydrill courses can raise your paranoia to a healthy level and can contribute to your code hygiene

​

Outline: 

​

Common misconceptions

Introduction to software security

• AppSec: The weakest link in cybersecurity

Some common password myths

• Password policy myth #1: Composition rules

• Password policy myth #2: Password expiration

• Password policy myth #3: Password hints and suggestions

• Password policy myth #4: No restrictions on passwords

Managing passwords the right way

• Password policy

• NIST authenticator requirements for memorized secrets

• Password hardening

• Using passphrases

• Demo – Password reset weakness

Learning how not to code