Jumpstarting Your DevSecOps Pipeline with IAST and RASP
Learn to create an effective DevSecOps pipeline using free tools like IAST and RASP. Gain real-time security feedback, continuous vulnerability analysis, and enhanced attack visibility for improved application security.
Temporal: Objects in the Rear View Mirror Are Closer Than They Appear - Application Security Challenges in Cloud Native Era
Explore how software development changes impact application security, challenges in Cloud Native workloads, and strategies for staying secure in evolving tech landscapes.
Threat Model-as-Code: Integrating Security into the Software Development Lifecycle
Integrating threat modeling into software development lifecycle using "Automaton" framework, enabling actionable outputs and automated security testing for improved product security.
Growing Security Champions: Scaling SDL Through Development Partnerships
Scaling application security through Security Champions: strategies for selection, training, and empowering developers to handle security activities within their teams, improving overall security posture.
Creating an AppSec Pipeline with Containers in a Week
Explore the journey of setting up an AppSec pipeline using Docker containers, addressing challenges, managing false positives, and optimizing security tools for seamless integration with development teams.
Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines
Explore methods for calculating and tracking web application attack surface evolution, and learn to integrate security testing into CI/CD pipelines using metrics-based policies.
Creating Accessible Security Testing with ZAP - AppSecCali 2019 Lightning Talk
Introducing OWASP ZAP's Heads Up Display: A new UI that makes security testing more intuitive for developers and professionals, enabling efficient use of the attack proxy tool.
A Pragmatic Approach for Internal Security Partnerships
Strategies for effective security partnerships with engineering teams, focusing on shared risk views, automation, and integrating security into product roadmaps.
Baking Security Into the Software Development Lifecycle - CISO Panel
CISOs discuss strategies for integrating security into rapid application development, sharing real-world experiences on managing evolving methodologies and pressures to publish securely.
DevSecOps: Improving Security Posture Through Linguistic Theory
Exploring linguistic theory's impact on security practices, this talk examines how names and metaphors influence organizational processes and interactions to enhance security posture.
Application Security for DevSecOps - Don't Learn, Don't See, Don't Run
Explore the future of DevSecOps with insights on seamless security integration, emerging technologies, and adoption strategies for the next three years in application development.
DevSecOps Roundup - An Overview of the Current State
Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.
The Gift of Feedback - Enhancing Application Security
Discover how to implement next-generation security by leveraging feedback, pushing security left, and making it consumable. Learn strategies to engage developers and address the challenges of securing complex software workloads.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Job Security in a DevSecOps World - Transitioning from Control to Value Creation
Explore transitioning from security control to business value creation in DevSecOps, addressing job security concerns and elevating security conversations to strategic levels.
Requirements Gathering for Successful DevSecOps Pipeline - AppSec EU 2017
Discover key requirements for implementing a security-focused automated development pipeline in your organization, addressing assessment, bottlenecks, training, metrics, and monitoring.
Integrating Security in Agile Projects - AppSec EU 2017
Practical guide on integrating comprehensive security programs into agile development, featuring a real-world case study and tips for organizations prioritizing security in their projects.
SDLC for the DevSecOps Era - Adapting Application Security Techniques
Practical lessons on adapting application security techniques for agile development, covering lightweight controls, visibility, and measuring security maturity in modern DevOps environments.
AppSec Pipelines and Event-based Security - Moving Beyond Traditional Security Testing
Explore event-based security and AppSec pipelines to enhance traditional security testing methods. Learn innovative approaches for improving application security from an experienced professional.
DASTProxy: Automated Security Testing Focused on Business Context
Explore DASTProxy: a tool for automated security testing that focuses on business context rather than crawling, enhancing efficiency and effectiveness in application security assessments.
The Art of Vulnerability Management - Transforming Security Collaboration
Transforming vulnerability management from a nuisance to a collaborative process that drives accountability and transparency in software security through decentralization and empowerment.