Security-Centered Design: Exploring the Impact of Human Behavior

http://photos2.meetupstatic.com/photos/event/2/b/2/b/event_49331051.jpegSecurity is more than filtering input and escaping output (FIEO), and it's more than cross-site scripting (XSS) and cross-site request forgeries (CSRF). Security isn't even always black and white. In order to create a more secure user experience, we need to understand how people think. Perception is as important as reality, and meeting user expectations is a fundamental of good security.

Join Boston PHP and O’Reilly Author Chris Shiflett (http://twitter.com/shiflett) as we take you through a fascinating talk on the human behavior and social aspect of security. We’ll explore topics such as change blindness and ambient signifiers, and we’ll show some real-world examples that demonstrate the profound impact human behavior can have on security. If your a designer, developer, human interaction designer, you won’t want to miss this talk. http://shiflett.org/img/profile_pic.jpg

About Chris Shiflett:
Chris is no stranger to Boston PHP as he’s given two talks with us before in 2005 on PHP Security Audit HowTo (https://www.meetup.com/bostonphp/events/4761136/) and in 2006 on Zend Framework (https://www.meetup.com/bostonphp/events/4891924/) . We are fortunate to have him come back.

Chris is a web craftsman from Brooklyn, NY, and a founding member of Analog (http://analog.coop/) , where he works with some of the most talented people making things he loves, like Mapalong (http://mapalong.com/) and Brooklyn Beta (http://brooklynbeta.org/) .

He blogs at shiflett.org (http://shiflett.org/) , and can be found as @shiflett (http://twitter.com/shiflett) on Twitter. In 2007, he started PHP Advent (http://phpadvent.org/) , an annual Advent calendar for the PHP community. Since 2009, he’s been part of Studiomates (http://studiomates.com/) , a co-working studio in Brooklyn.

He has authored and co-authored a few books — most notably Essential PHP Security and HTTP Developer’s Handbook. He sometimes writes articles for publications like Smashing Magazine, where he also serves on the editorial panel.

He has a love for sharing ideas speaking at conferences — like Webstock, OSCON, South by Southwest, and the Future of Web Apps. He attends events like Foo Camp, Kiwi Foo Camp, and the Microsoft Web Dev Summit.

On PHP Security...
During our initial interview with Chris he made a profound statement about web security with languages. "Out of all the programming language communities out there, the PHP community understands security the most."