Automating myself out of a job...
summary
Argues that left‑shifting finds most low‑ to mid‑risk bugs early and claims automation can remove roughly 70% of issues before a pen test. Describes hooking mobile instrumentation and CI (Jenkins) to run scanners and unit tests, using Burp Suite, sqlmap and drozer, and failing builds on detected vulnerabilities to force fixes (fail the build). Proposes continuous red teaming against a central issue database, and shows examples where brute‑force verification codes, directory traversal and SQLi are detected automatically (continuous red teaming).
AI-written summary · about
chapters (41)
- 0:00Intro
- 0:43Who can relate
- 1:56Why this talk
- 5:06Who am I
- 5:43Pentesting
- 6:02Traditional Development
- 6:38Agile Development
- 7:32Continuous Integration
- 7:53Security Testing
- 8:26Testing Results
- 8:43Developer Ego
- 9:35Application
- 10:28High vulnerabilities
- 11:01Medium vulnerabilities
- 11:35Low vulnerabilities
- 11:55Integration of security
- 12:24Testing earlier
- 12:49Requirements gathering
- 13:47Understand the risk
- 14:17Think about the attacks
- 15:12Abuse stories
- 16:06Document attacks
- 16:22Design issues
- 16:56Project management
- 19:11Unit Testing
- 19:38Unit Testing Example
- 20:38Security Tools
- 22:17Static Application Security
- 23:15Dynamic Application Security
- 24:27Instrumentation
- 24:43Testing
- 25:24Infrastructure
- 26:14Project Managers
- 26:30Security Tests
- 27:05Requirements
- 27:22Pen Testing
- 27:34Automating Security
- 28:58Continuous Red Team
- 29:58Checklist
- 30:25Capture results
- 36:04Whats the best use of consultants
related talks
17mManual versus automated penetration testing on AWS
41mSkillful, Scalefull Fullstack Security in a State of Constant Flux
46mMaking Security Agile
43mSecurity Testing Tools: Can I Touch You There?
39mAutomating Your Security Checks: Stop Hiding Your Flaws Next to the Monsters...
44mApplication Security: Everything we know is wrong
47mRollercoaster of Security Automation
34mPurple Team Strategies for Application Security