~/talk

Introduction to OWASP SAMM for Software Developers: Building Secure Software

on YouTube 33m
Talkat BlaBlaConf 2025 · 2025-02-03..02-07· [security, developer-experience]

speaker

name:Housni Abdellatif
x:HousniAbdellat8

resources

video:https://youtu.be/ooJzCs_VC4I
slides:none on file

summary

Overview of OWASP SAMM as a practical framework that is measurable and actionable not just conceptual it maps five business functions into security practices with three maturity levels and concrete activities per stream. Recommends specific tooling and pipeline steps such as SBOMs and Dependency-Track, CycloneDX manifests, SonarQube style SAST, OWASP ZAP DAST, dependency scanning and CI gates. Emphasizes training, security requirements, metrics, secret storage, pen testing and an incident response process and shows how these raise maturity in DevOps pipelines.

AI-written summary · about

chapters (12)

  1. 0:00Introduction to OWASP SAMM
  2. 1:07Why application security matters
  3. 3:11Costs of ignoring security
  4. 7:09Common security misconceptions
  5. 10:46SDLC and security integration
  6. 14:21Seven touchpoints model
  7. 17:14Microsoft SDL overview
  8. 20:27OWASP SAMM framework
  9. 22:20SAMM maturity levels
  10. 27:28SAMM vs other models
  11. 30:22Practical SAMM resources
  12. 31:28Next steps and conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.