Introduction to Inner-Loop Security - Shifting Left, but Better
Explore inner-loop security as the next evolution of "shift left," enabling developers to build secure-by-design products through improved methodologies and tools.
The Software Security Testing Lifecycle - A Framework for Effective Security Testing
Comprehensive framework for integrating security testing throughout development, empowering teams to identify threats early and validate controls effectively.
Making Continuous Security a Reality with OWASP's AppSec Pipeline - 2018
Learn to implement continuous security testing using OWASP's AppSec Pipeline tool. Discover how to automate, customize, and integrate this open-source solution into your DevSecOps workflow for real-world application security.
Evolving Your Security Mindset to Embrace DevSecOps
Explore DevSecOps integration, aligning security with DevOps, agile methodologies, and cloud technologies to enhance software development velocity and operational flexibility.
Security Instrumentation - The Future of Software Security
Explore security instrumentation as a revolutionary approach to enhance software security, offering dynamic capabilities like intrusion detection, SBOM reporting, and runtime protection without code changes.
Living in AppSec - Promised, Fantasy, or Wonderland? - 2019
Explore GitHub's AppSec practices, successes, and ongoing challenges in creating an ideal security environment for application development.
Running FaaS with Scissors - DevSecOps and Serverless Security Testing - 2019
Explore DevSecOps and FaaS technologies to enhance secure code creation, utilizing OpenFaaS for faster, more consistent security assessments and continuous testing with quick feedback loops.
Securability - Enhancing Security Practices in Organizations
Explore strategies for enhancing security practices and improving overall organizational resilience in this insightful talk by Shannon Leitz.
The End of the AppSec Team - Future of Application Security
Explore the future of application security, challenging traditional team structures and proposing innovative approaches to address the growing demand for AppSec professionals in software development.
Practical DevSecOps - Creating a Simple Free Pipeline - 2018
Create a free DevSecOps pipeline using IAST and RASP for real-time vulnerability detection, attack prevention, and seamless integration into existing development workflows, enhancing security across the software lifecycle.
The DevSecOps Builder's Guide to the CI/CD Pipeline
Comprehensive guide to integrating security into DevOps practices, focusing on CI/CD pipeline implementation for enhanced software delivery and protection.
AppSec at a Startup - Year Zero
Learn strategies for building an effective application security program at a startup, including developer engagement, automation, and rapid security improvements for SaaS companies.
How to Put Security in DevOps - 2017
Integrating security into DevOps: overcoming obstacles, enabling automation, and reaping benefits. Learn strategies for seamless AppSec implementation in continuous delivery environments.
We're Not Doomed! How to Successfully Manage Software Supply Chain Security
Discover strategies to enhance DevSecOps and protect against software supply chain attacks using real-world examples and the OSCAR framework. Learn to assess and improve your organization's security practices.
Building Security In - DevSecOps Approach for Agile Development
Explore DevSecOps approach for integrating security into DevOps, focusing on automation, team ownership, and building security in from the start for faster, safer deployments.
Implementing Effective DevSecOps for Azure
Learn to scale security using automation and integrate firewall deployment into DevOps for Azure, focusing on dynamic security solutions and centralized management for cloud transformation.
Baking in Security - Lecture 1.2.5
Explore essential security practices for software development, emphasizing the importance of integrating security measures from the start of the development process.
Making DevSecOps Happen with Containers - Security Concerns and Solutions
Explore DevSecOps implementation with containers, addressing security concerns through automation and collaboration. Learn to bridge the gap between DevOps and security teams for better application protection.
Improving Security while Reducing Toil with DevSecOps
Learn DevSecOps techniques to integrate security into development, reduce manual tasks, and foster a security-first culture across teams. Gain insights on tools and practices for efficient, compliant software delivery.
DevSecOps: Integrating People and Automation in Application Security
Explore DevSecOps principles, focusing on human aspects like collaboration, communication, and decision-making to enhance application security within real-world constraints.
A DevSecOps Tale of Business, Engineering, and People
Explore DevSecOps through a historical lens, examining its impact on business, engineering, and resilience. Learn from past challenges to build high-performing teams and implement effective DevSecOps strategies.