TLDR InfoSec · STRATEGIES & TACTICS
PAVED ROADS? SECURE-BY-DESIGN? MORE BUZZWORDS???
Summary from the TLDR InfoSec newsletter
Paved roads is a common security buzzword that refers to the process of creating a standardized path for common security pitfalls. Security reviews should look to identify common pain points across different reviews as candidates for paved roads and then work with teams that will pioneer the paved path. Following this methodology, full classes of vulnerabilities can be fixed at scale as opposed to individually as they appear in individual reviews.