Joern Freydank -- Security Design Anti Patterns Limit Security Debt

Joern Freydank is a Lead Cyber Security Engineer with more than 20 years of experience. He is currently establishing the Threat Modeling Program at a major insurance company. Joern joins us to talk about security design anti-patterns. He defines the term, explains security debt, reviews the categories of anti-patterns, and walks us through the example of a common role misconception. We hope you enjoy this conversation with... Joern Freydank is a lead cybersecurity engineer with more than 20 years of experience. He's currently establishing the threat modeling program at a major insurance company. You're about to listen to AppSec Podcast. When you're done with this, be sure to check out our other show, High Five.The Application Security Podcast is brought to you by Security Journey.About Security JourneyJoern Freydank is a lead cybersecurity engineer with more than 20 years of experience.→ Learn more about Security JourneyConnect with Joern Freydank:→ Security Design Anti-Patterns -- Creating Awareness to Limit Security Debt (YouTube talk)→ Stack OverflowMentioned in this episode:→ Security Design Anti-Patterns -- Creating Awareness to Limit Security Debt (YouTube talk)→ Stack OverflowFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Joern Freydank: Security Design Anti Patterns Limit Security Debt03:04 You came to security from more of the breaking perspective04:37 One of our topics that we're going to be talking about07:19 It's missing pieces versus bad architectural decisions that are being laid10:53 That's one of the things that, you know, I think about13:11 Yeah. And I was thinking a similar, the trade-off with also17:58 Talking about roles, we mentioned roles. There's a malicious insider admin20:15 Yeah. And you think about the couple of examples you shared21:49 Yeah, occasionally. Certainly. I mean, like you said, mostly from the25:04 What's the corresponding pattern, essentially27:13 As we start to kind of bring this conversation towards a31:04 There's an awareness— I mean, there's an awareness play in that