Security by Stealth
summary
Attempts to run voluntary workshops fail until a Slack post gets 40+ emoji responses, so two hands‑on sessions run using OWASP Juice Shop with stickers, food and gamified challenges; teaching STRIDE threat modelling and card games like Elevation of Privilege drives ongoing Slack groups and a company-wide security guild that includes the four isolated security experts. Tool training covers Burp and OWASP ZAP (chosen for CLI/CI), but pipeline integration stalls and full CI automation never lands.
AI-written summary · about
chapters (9)
- 0:00Start
- 2:42Principal Test Engineer
- 4:35Exploratory Testing Workshops
- 13:47Gauge Interest
- 18:50How To Set Up an Organizing Team for Success
- 19:32Objectives
- 25:41Threat Modeling
- 26:14Elevation of Privilege
- 29:15Integration into Ci
related talks
24mConcrete Steps to Create a Security Culture
20mPlay, Learn, Secure: The Power of Gamification in Security Training
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
45mLeveraging Projects and Tools to Transform Your SDLC
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
42mFrom Devops to DevSecOps
52mContinuous Security
51mShifting Knowledge Left: Keeping up with Modern Application Security