Security Test Driven Development
summary
Covers Security Test Driven Development: using security-focused unit tests written during development to find business-logic and other vulnerabilities that static scanners miss. Demonstrates practical examples and a step-by-step real-world Spring framework application showing how to write and run security unit tests so issues are caught before deployment.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:52Cyber attack stats and threats
- 3:38STDD principles
- 7:15Focus on logic flaws
- 9:00Demo app and flaw demo
- 15:43Finding flaws with unit tests
- 19:18Fixing flaws in code
- 23:52CSRF protection and tests
- 24:34Key points and summary
- 26:03Q&A
related talks
43mTest Driven Application Security
45mBringing Security Testing To Development: How To Enable Developers To Act As Security Experts
26mBeyond Testing: Application Security in the Age of DevOps
44mShift-Left-Security with the Security Test Pyramid
53mTest Driven Application Security
40mMaking Security an integrated part of the SW Dev Lifecycle
49mThe Security Testing Pyramid for Developers
37mDeploying Security Testing Practice in Your Team and Company