How to embed security into your process
summary
Claims concrete steps to embed security: inventory components, run threat modeling with STRIDE and rate risks with DREAD, add code review and patching to sprint priorities. Use tools like Zed Attack Proxy for active scans, Fiddler for CSP collection, Threat Dragon for diagrams, S3 Browser to find public buckets, and Node Security Platform or npm outdated to track vulnerable packages. Expect false positives from static and dynamic analysis, plan ~three months to tune scanners, and always confirm findings before filing prioritized tickets.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:27How to embed security into your process
- 5:56How to embed security: Inventory
- 7:08EQUIFAX
- 28:04Security vulnerabilities are bugs Š JIRA
- 34:25How to embed security Tools
related talks
52mContinuous Security
01h 03mBe your own Threatbuster!
42mContinuous Security: Integrate security tools into your DevOps Pipeline
44mSecurity Practices Useful in Agile Development
38mPrioritizing Trust While Creating Applications
27mBridging the Dev-Sec divide: Three tips for agile developers
29mSecuring Your Web Application Pipeline From Intruders
01h 02mSo long secure coding... Hello secure development!