Dan Bergh Johnsson & Daniel Deogun - Domain Primitives in Action: Making it Secure by Design

Explore DDD 2017 - Denver, Sept. 21-22

What are the basic blocks with which you build a domain? It is probably not integers, strings, and floats. Instead, it might be things such as “room number,” “track,” or “time slot.” They might be simple; they might be complex, but they are the simplest things that still make sense in your domain. These are your domain primitives.

Obviously, value objects are a feasible way of implementing many domain primitives, however, not all value objects are primitives. In this session, they dive into what domain primitives are and how they enable solutions that make your code secure by design. In addition, they show how domain primitives in combination with context mapping yield a powerful way to clean up legacy code. Dan and Daniel covered some concrete patterns that you can start using immediately.

This presentation is partly based on material from their book, "Secure by Design", by Dan Bergh Johnsson, Daniel Deogun, and Daniel Sawano.

About Dan

Agile aficionado, Domain-Driven Design enthusiast, and code quality craftsman with long time interest in security. The combination made Dan use quality practices from DDD to address application security issues - thus being one of the founders in the field of Domain-Driven Security circa 2009. I am also a partner at Swedish consultancy Omegapoint.

I have also given numerous presentations over the last fifteen years including internationally renowned conferences such as JavaPolis, QCon, Jfokus, OPKoKo, Devoxx, and JavaZone.

I am Co-authoring the upcoming book "Secure by Design" together with Daniel Deogun and Daniel Sawano.

About Daniel

Daniel Deogun is a Coder and Quality Defender who fights security issues on a daily basis using magic spells from DDD and an overall security mindset. In his spare time, Daniel coauthors the book Secure by Design together with Dan Bergh Johnsson and Daniel Sawano. As a developer, Daniel started to play with Java in 1997 and his extensive experience ranges from patient critical pacemaker systems to web applications to high performant software in the gaming industry. Combining this with his passion for tech has made him a frequent speaker at international conferences such as DDD Europe, DDD eXchange, and JavaZone. Daniel is currently a senior consultant at Omegapoint in Stockholm, Sweden.

[kamillatosinski]

How would you implement RoomNumber validation for different hotels? Let's say one has 1 - 500 and the other one has 1 - 200?

[theNikki]

Really good presentation, however what I cannot quite understand is that while validating some value object we quite often need some external service to do the validation and we don't want to inject service to value object or pass service as parameter, any advice on this?