Leveling up an application security program
summary
Over a first year at Riot Games the application security program moves from invisibility to measurable practice: a 15‑question design checklist and secure coding.games.com pages supply code samples for ~20 languages, monthly 30‑minute trainings (recorded) and a community‑of‑practice embed security into teams, QA gains security tests and an automated pipeline starts to accept checks, vulnerabilities land in a central JIRA project, a public bug‑bounty pays $130,000+, and a planned open‑source appsec dashboard begins to take shape.
AI-written summary · about
chapters (4)
related talks
01h 00mImproving the Chances of Success in Secure Software Development
57mKeynote: Maturing Your Application Security Program
05mApplication Security is a Community Effort
17mGamify security best practices to scalably improve engineering culture
21mWhy Unleashing Your Software Security Potential is Necessary & How to Achieve It
31mTopics of Interest: Scaling AppSec through Education
28mData-Driven AppSec Champions Programs – Benchmarking Your Program with Numbers
24mConcrete Steps to Create a Security Culture