AppSensor: Real-Time Event Detection and Response
summary
AppSensor claims to put detection and automated response inside applications with a free v2 reference implementation and a clear architecture: apps emit events to a central App Center which runs policy-driven thresholds and emits responses back. Implementation is Java with multiple comms supported — Kafka/RabbitMQ/REST/WebSocket — and integrations for visibility like ELK and InfluxDB dashboards added via a Summer-of-Code. Demos show an exception-bucketing UI and working responses. It needs application instrumentation or framework plugins and still relies on sensible checks in the app.
AI-written summary · about
chapters (15)
- 0:00Start
- 1:53Agenda
- 2:35terminology
- 4:50dev buzzwords
- 5:50last -5 yrs security
- 7:03dev vs. security
- 8:26the pitch
- 14:06example
- 19:48OWASP ASIDE
- 22:26owasp SoC sprint
- 24:04machine learning
- 37:01future
- 38:36related projects
- 41:10contributors
- 41:22links
related talks
52mAppSec at DevOps Speed and Portfolio Scale
17mIdentify and solve security risks faster with Application Signals
26mPrevent Business Logic Attacks using Dynamic Instrumentation
59mWhy Your AppSec Experts Are Killing You
09mAutomated Application Security Testing
52mApplication Security at DevOps Speed and portfolio scale
51mSecurity incident monitoring, mitigation & metrics using feature flags
23mUsing CD Events to Capture End to End Application Security Posture