Automated Security: Face Your Vulnerabilities
summary
Marine du Mesnil explains that web vulnerabilities often go undetected for a long time (average 212 days) and that penetration tests are only a temporary reassurance. She presents an approach that automates cybersecurity checks, teaches key automation tools, and applies a Lean problem‑rooting method (QRQC / Dantotsu) to analyze causes and put durable, automated countermeasures in place—with special attention to access control issues highlighted by OWASP.
AI-written summary · about
chapters (15)
- 0:00Cybersecurity intro
- 2:05Security role and beliefs
- 4:10Ignoring security flaws
- 8:44Security complexity and responsibility
- 11:13OWASP Top 10 limits
- 13:41Automated vulnerability detection
- 16:33Risk analysis with QRQC
- 20:04QRQC case study
- 27:08Spring Boot access control
- 29:35Symfony and Django security
- 31:21Injection prevention automation
- 33:30XSS vulnerability linters
- 35:14Other security tools
- 35:57Takeaways and conclusion
- 37:59Q&A
related talks
33mAutomated security: face your vulnerabilities
39mAutomating Your Security Checks: Stop Hiding Your Flaws Next to the Monsters...
52mContinuous Security
44mApplication Security: Everything we know is wrong
41mSkillful, Scalefull Fullstack Security in a State of Constant Flux
41mVulnerabilities that Hide from your Tools
20mHow to Use Your Vulnerabilities to Train Your Developers on Security
39mAutomating myself out of a job...