Security Basics for Developers (and Not Only Developers)
summary
The talk explains fundamental application security practices for development teams in CI/CD environments, focusing on shifting security left in the SDLC to prevent vulnerabilities from faulty code or misconfiguration before deployment. It covers concrete topics such as repository and credential management, access controls and VPNs, dependency scanning and security tools, and pragmatic practices to integrate security into coding workflows rather than relying on reactive penetration testing.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 2:41SDLC changes and DevOps
- 12:15CI/CD
- 21:06Human factor and phishing
- 34:33Password and secret management
- 41:37Postmortems and Bug Bounty
- 47:18Summary and Q&A
related talks
34mEmbarking on Your Security Journey
40mSecurity-as-Code to Accelerate DevSecOps, a Practical Guide to Get Started
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
27mDevelopers Struggle with Application Security (and How to Make ...)
22mShifting left, how security fits into the DevOps story
26mBeyond Testing: Application Security in the Age of DevOps
23mContinuous Security
46mAre Developers the New Front Line of Security?