Visualizing Security Architecture

Common approaches to application security such as "don't make a stupid mistake" or "follow the checklist" don't make it easy to design or analyze the security workings of an application as a whole. This talk will show how to create a visual security architecture that defines the security characteristics of an application's data, functional components, and transit paths. Then we'll discuss how the architecture simplifies communication and decision-making regarding application security needs and features, resulting in more thoughtful choices with less pain.