Cybersecurity: It’s All About the Coders | Dan Cornell | TEDxSanAntonio

Overview

The video argues that as society becomes more reliant on software and connected technologies, cybersecurity becomes a critical requirement—not only for protecting financial data, but for protecting any sensitive information, especially medical and personal data that can’t be “undone” once exposed.

The speaker frames security around the CIA triad:

• Confidentiality
• Integrity
• Availability

They explain that while breaches like stolen credit cards are often recoverable, compromises of medical records are typically irreversible.

Why Security Must Be “Baked In”

A central claim is that modern technology is largely governed by software, so both:

• the pace of innovation, and
• the security quality of systems

are strongly influenced by coders.

However, the speaker argues that most developers aren’t trained to treat security as a core part of software engineering. Instead, it’s often treated as:

• a specialized topic, or
• an afterthought.

The speaker describes their own education as having minimal security coverage, focusing more on unrelated “systems” skills. They suggest computer science curricula should be redesigned so security is built into the process from the start, rather than added later.

Limits of “Aftermarket” Training

The speaker critiques the scalability of current solutions like aftermarket training for developers. While such training is valuable, they argue it can’t reach enough programmers fast enough, so changes must begin earlier—during education and initial training, not only after developers are already working.

Example: SQL Injection and Standards

To show why vulnerabilities matter, the speaker uses SQL injection as an example. It can threaten:

• confidentiality
• integrity
• availability

of data stored in databases. They also recommend testing against established standards such as the Payment Card Industry Data Security Standard (PCI DSS).

The speaker emphasizes making security concepts easier and more universal for programmers to apply, even if they don’t have deep database expertise.

A Shift Toward Adversarial Thinking

The video promotes a mindset shift: developers should adopt an adversarial approach, asking not only:

“What should this code/system do?”

but also:

“What shouldn’t it do?”

For example, a banking system should not allow transfers between incorrect accounts.

The video concludes by urging consumers to question vendors about what they’ve done to ensure systems only perform intended actions, aiming to create a more secure future.

Presenters or Contributors

• Dan Cornell (speaker, TEDxSanAntonio)