Главная
Study mode:
on
1
Intro
2
Agenda
3
Background
4
Value and Risk
5
Software Assurance frameworks
6
CMMI
7
SAMM Structure
8
SAMM in Practice
9
Data Collection
10
Data Model
11
Limits of SAMM
12
The Big Drivers
13
Agile vs DevOps
14
How do we get to DevOps
15
Opportunity cost
16
Show value early
17
Benchmark
18
Datadriven benchmarking
19
Collecting data for benchmarking
20
Streamline the collection process
21
Minimize impact on development teams
22
Be flexible in depth
23
The 8020 rule
24
Communicate value
25
Gamification
26
Conclusion
27
ROI
28
What evidence
29
Automation
30
Benchmarks
31
Who owns OpenSAMM
32
How to make OpenSAMM fun
Description:
Explore a comprehensive conference talk from AppSecEU 2016 in Rome that delves into enhancing OpenSAMM's effectiveness in DevOps environments. Learn about software assurance frameworks, SAMM structure, and practical implementation. Discover strategies for data collection, benchmarking, and streamlining processes to minimize impact on development teams. Gain insights into the challenges of Agile vs DevOps, opportunity costs, and showing value early. Understand the importance of data-driven benchmarking, flexible depth assessment, and communicating value through gamification. Examine the ROI of OpenSAMM, automation opportunities, and ownership considerations. Conclude with practical tips on making OpenSAMM more engaging and effective in modern software development practices.

Making OpenSAMM More Effective in a DevOps World

OWASP Foundation
Add to list
0:00 / 0:00