Security-Centered Design: Don't Just Plan for Security; Design For It

Anyone who has ever disabled a certain proprietary software firewall because of its constant, irritating demands for approval knows that secure development practices are useless if you don't design your product so that the security solutions are usable. User perception is as important as reality, and meeting user expectations is a fundamental of good security. In this talk, I demonstrate both usable and unusable security solutions and give you practical techniques for creating a secure user experience.