Security @Scale 2015: Engineering Security

This post details the "Security @Scale 2015" conference, highlighting engineering security efforts at Facebook, HubSpot, Akamai, and Brightcove. Key contributions include the development of the Security Infrastructure team at Facebook to build tools for secure development and threat detection, the use of automation and tooling to make security easier for engineers, and the creation of Invariant Detector to automatically enforce permission checks and protect information. Other contributions discussed include making security usable at HubSpot through authentication improvements, learning from other disciplines for safety at scale, contributing to Elliptic Curve Cryptography standards, building open-source security software like osquery, automating mobile malware identification, visualizing cybersecurity data at scale, building secure servers from the ground up, and using pen testing and tooling throughout the SDLC.