Application Security: Inside Out
summary
Shows how Contrast agents instrument apps (Java/.NET/Node/Python/Ruby/Go/PHP) to do runtime data‑flow IAST plus SCA, claims real‑time, high‑accuracy findings and that the tool 100% on benchmark; runs a terra cotta Bank demo that surfaces a SQL injection originating from an unsanitized username string; explains the need for traffic or automated tests for coverage, lists deployment options (JAR param, middleware, Docker, Kubernetes operator) and notes a free Contrast Assess community edition.
AI-written summary · about
chapters (6)
- 0:00Intro
- 1:53The many flavors of app security tools
- 6:23Why does it matter?
- 13:06Monitoring apps from inside out
- 22:06Demo
- 27:47Outro
related talks
52mApplication Security at DevOps Speed and portfolio scale
59mWhy Your AppSec Experts Are Killing You
16mI don’t always do AppSec testing, but when I do, it’s in production
33mBattle Tested Application Security
52mAppSec at DevOps Speed and Portfolio Scale
57mShift Left Security with the Security Test Pyramid
44mShift-Left-Security with the Security Test Pyramid
09mAutomated Application Security Testing