Automating Your Security Checks: Stop Hiding Your Flaws Next to the Monsters...
summary
Shows how to automate web-application security scanning using concrete tools: running OWASP Juice Shop scans, SonarQube, and IDE linters for React/Vue; an AST-based Maven tool that enumerates 436 Spring endpoints to verify @PreAuthorize annotations; plus a dynamic checker for Symfony/Django and CI/IDE integrations. Describes a pipeline that catches real flaws, reduces findings with automated tests, and applies targeted quick root‑cause fixes (QRQC).
AI-written summary · about
chapters (8)
- 0:00Security intro and JO
- 3:59Ignoring vulnerabilities
- 9:42Automated detection tools
- 13:18QRQC analysis method
- 22:09Access control example
- 26:00Injection automation
- 29:13Key takeaways and tools
- 32:24Resources and feedback
related talks
57mShift Left Security with the Security Test Pyramid
27mHow to Start Security Testing Without Fear
45mAutomated Security Testing in a DevOps world
42mContinuous Security: Integrate security tools into your DevOps Pipeline
47mRollercoaster of Security Automation
52mApplication Security at DevOps Speed and portfolio scale
26mSecurity Automation For GraphQL
29mSecuring Your Web Application Pipeline From Intruders