Abuser Stories: Thinking Like a Hacker

Description:

As the biggest ecommerce company of the Netherlands and Belgium security risks are/were growing exponentially. But it’s not scalable to let your security team grow with the same rate. That’s why we focused on creating a security mindset: making security a responsibility of everyone, not only the security team.

To do this we organized Abuser Story workshops for Product Owners and Business Analysts. Abuser stories are a fun way of thinking about the security of your new features. It triggers to think of unhappy flows, think of thresholds to monitor and so on. Making the systems Secure by Design. In this talk Jim will tell the journey of bol.com, the growing importance of security, and the way we tried to cope with it in a fun way.