Black Hat
The Tactical Application Security Program - Getting Stuff Done
Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.