Главная
Study mode:
on
1
Intro
2
Sensor Basketball
3
Application Security
4
Security Spending
5
Security Solutions
6
Traditional Application Security
7
How it works
8
Instrumentation
9
Vulnerability
10
Coral Reef analogy
11
Contrast for Eclipse
12
Demo
13
Trace
14
Eclipse
15
Practical
16
AppSec API
17
Continuous Security
18
Instrumentation Approach
19
Security is a Thing
20
Apple Pay Security Story
21
Defense Strategies
22
Sensor Network
23
Analytics
24
Yelp
25
Security dashboards
26
Penetration testing
27
Assurance
28
Continuous AppSec
Description:
Explore the evolution of application security in this 59-minute conference talk from OWASP AppSec California 2015. Discover how to transform your organization into a "Continuous Application Security" model that generates automatic assurance across an entire application security portfolio. Learn about the "sensor-model-dashboard" feedback loop that enables real-time, continuous application security. Gain insights into instrumentation-based application security testing with a demonstration of the free Contrast for Eclipse tool. Examine topics such as DevOps integration, security spending, traditional vs. modern security solutions, and the importance of continuous security practices. Delve into practical examples, including the Apple Pay security story, defense strategies, and the benefits of security dashboards. Understand how to move beyond expert-based waterfall models and embrace a more efficient, scalable approach to application security.

Why Your AppSec Experts Are Killing You - Evolving to Continuous Application Security

OWASP Foundation
Add to list