Explore an innovative approach to automating application security assessments in this 45-minute conference talk from AppSec EU 2017. Discover how a team tackled the challenge of securing hundreds of applications across diverse programming languages, platforms, and legacy systems with limited resources. Learn about their journey in creating an automation-scanning and reporting platform using Jenkins, HP Fortify SCA/SSC, OWASP ZAP, OWASP DefectDojo, Slack, and Jira. Gain insights into their decision-making process, including technologies they chose not to use and why. Witness a live demo showcasing the implementation of this automated solution, covering topics such as vulnerability scanning, metrics, aggregated data, dashboards, and JIRA reporting. Understand the lessons learned and participate in a collaborative session where feedback and questions are encouraged.
Rise of the Machines: Automating Application Security Assessments - AppSec EU 2017