Building an Application Security Program

Building an Application Security Program

Learn how to build an effective application security program in this comprehensive conference talk from the Central Ohio InfoSec Summit 2016. Explore various methods of application security, including static and dynamic analysis, and understand the importance of manual verification. Discover the concept of Kaizen for continuous improvement in your security practices. Gain insights on starting small, aligning AppSec with SDLC, and expanding your program effectively. Understand why policies and standards matter, and learn how to influence projects from their inception. Delve into additional considerations such as setting up a quality assurance program and the importance of verifying security measures.