<commit_before>---
layout: default
title: Introduction
type: research
---

### Introduction

As technology and software becomes more and more important to Portuguese society it is time to take it seriously and really become a player in that world. Application Security can act as an enabler, due to its focus on how code/apps actually work, and its enormous drive on secure-coding, testing, dev-ops and quality.

The same way that Portuguese navigators once looked at the unknown sea and conquered it,
our new digital navigators must do the same with code. This book is based (and expands) on a presentation given at BSidesLisbon on 9
November 2016.

It provides a number of paths for making Portugal a place where programming, TDD, Open Source, learning how to code,
hacking (aka bug-bounty style) and DevOps receive the consideration, investment and respect that they deserve.<commit_msg>Update Introduction.md<commit_after>---
layout: default
title: Introduction
type: research
---

### Introduction

This book is based, and expands on, a presentation given at BSidesLisbon on 9 November 2016.

The ideas I consider here look to the future, as some of the concepts are too radical until the AppSec problem becomes much bigger. They are ideas for a future when solutions are wanted.  

As technology and software becomes more and more important to Portuguese society it is time for Portugal to take it more seriously, and become a real player in that world. This book discusses a number of ideas to make Portugal a place where programming, TDD, Open Source, learning how to code, hacking (aka bug-bounty style), and DevOps receive the consideration, investment and respect that they deserve. Application Security can act as an enabler for this transformation, due to its focus on how code/apps work, and its enormous drive on secure-coding, testing, dev-ops and quality.

### Why I'm doing this

The current economic model is not working for secure code and secure software development.

The following reasons also explain why I want to share these ideas: 

* I see the train-wreck coming
* I know a good path to follow (i.e. how to create secure code and apps)
* I have been working on this problem for some time
* I want to create a place where our kids can have a future, and be safe


  * What are the warning signs of those growing problems?
  * How can we determine that things are getting worse?  (This is a near-impossible task, like boiling the ocean)
  * Analogy with climate change
  * List possible events

## Why?

* Software is Law
* Software is controlling the world
* Software epidemic
* Software outbreak
  * See recent DDoS attacks and vulns exploits

* Why should you care?
* Why should Portugal care?


**Reference**

* start with Why - https://www.ted.com/talks/simon_sinek_how_great_leaders_inspire_action?language=en
* golden circle: Why, What, How
{'fraction_non_alphanumeric': 0.04768534632788026, 'fraction_numerical': 0.003480682213713888, 'mean_word_length': 4.332096474953618, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 1, 'lorem ipsum': 0, 'www.': 1, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7355358', 'n_tokens_mistral': 723, 'n_tokens_neox': 692, 'n_words': 437}