#73 - Continuous Architecture (Part 3) - Security and Resilience - Eoin Woods

<p><em>“Because we ship stuff now almost immediately into public facing clients, almost as soon as we’re writing a line of code, we need to be thinking about how we make sure that it’s a secure line of code and it will be deployed and operated securely as well."</em></p> <p>Eoin Woods is the co-author of “Continuous Architecture in Practice” and the CTO at Endava. In this last of a three-part series of “Continuous Architecture” episodes, Eoin shared the remaining two important quality attributes covered in the book, i.e. security and resilience. Eoin explained why we should treat security as a critical quality attribute, the changes in the security landscape that make security becomes more challenging, the threat modeling concept, how to do continuous threat modeling, and his 10 secure by design principles. Eoin then shared about resilience as a quality attribute, how we should differentiate resilience from high availability, some common resilience techniques that we can implement in our system, and the importance of embracing failure mindset.</p> <p>Listen out for:</p> <ul> <li>Career Journey - [00:05:42]</li> <li>Software Architecture - [00:09:43]</li> <li>Quality Attributes: Security - [00:12:19]</li> <li>Security Landscape Changes - [00:14:08]</li> <li>Availability as Security Objective - [00:18:59]</li> <li>Threat Modeling - [00:20:51]</li> <li>Continuous Threat Modeling - [00:23:59]</li> <li>Secure by Design - [00:26:56]</li> <li>Quality Attribute: Resilience - [00:31:14]</li> <li>Resilience and High Availability - [00:33:38]</li> <li>Resilience Techniques - [00:35:36]</li> <li>Allowing for Failures - [00:40:18]</li> <li>3 Tech Lead Wisdom - [00:41:23]</li> </ul> <p>_____</p> <p><em>Eoin Woods’s Bio</em><br> Eoin is CTO at Endava, based in London. In previous professional lives, he has developed databases, created security software and designed way too many systems to move money around. Outside his day job, he is a regular conference speaker. He is interested in software architecture