Automated security: face your vulnerabilities
summary
The talk presents automated security approaches to find and fix web vulnerabilities faster: it notes vulnerabilities are typically detected 212 days after introduction and that over 50% of sites have critical flaws. It advocates shifting from occasional penetration tests to continuous automation and root-cause analysis, explaining cybersecurity automation tools and using a Lean QRQC/Dantotsu method to analyze defects and implement durable, automated countermeasures.
AI-written summary · about
chapters (8)
- 0:00Automated security intro
- 3:18Security flaws ignored
- 8:57Top OWASP vulnerabilities
- 11:47QRQC for security
- 15:20QRQC real-world example
- 22:46Automating security checks
- 25:37Shift left in security
- 27:30Q&A
related talks
40mAutomated Security: Face Your Vulnerabilities
41mSkillful, Scalefull Fullstack Security in a State of Constant Flux
39mAutomating Your Security Checks: Stop Hiding Your Flaws Next to the Monsters...
44mApplication Security: Everything we know is wrong
30mTopics of Interest: Automatic Vulnerability Remediation: The Trusted and Secure Road ...
49mMan vs Machine: manual and automated security testing
27mHow to implement Security as Code?
20mHow to Use Your Vulnerabilities to Train Your Developers on Security