A journey for security in a multifactor auth system for a whole nation

Description

One of the main challenges facing e-government initiatives is to safely perform an accessible authentication of users as citizens, which can provide both public and private entities with the necessary personal and security information in an open and standard fashion to enable more digital interactions. In the process of building a multifactor auth system for all Uruguayan citizens, the government found three critical features necessary to reach a successful solution: security, reliability, and usability.

Juan Saavedra outlines the Agile development of a REST application deployed on OpenShift and Kubernetes and details how the pursuit of security by design impacted the development process, the architectural design, and DevOps practices for the project, where you’ll learn about secure software architecture and development practices, as well as managing security and usability. He recaps outcomes effective enough to be recommended for broad usage in web software development to improve overall security. He reviews how the government managed and balanced interactions between security, usability, and reliability, as well as what lessons can be extracted regarding successfully making improvements that are mutually beneficial from an overall perspective.