~/talk

Keynote: CISO Perspectives

on YouTube 49m
Talkat OWASP AppSecUSA 2014 · 2014-09-16..09-19· [security]

speaker

name:Renee Guttmann
links:none on file

resources

video:https://youtu.be/PUKdP_DSLEY
slides:none on file

summary

Argues that software security is a business problem and that application security pulls a long train by forcing procurement, SLAs and funding changes; cites finding a price manipulation exploit on an early e‑commerce site and an enumeration of all user emails in a cloud service, turning one-person effort into a seven-person appsec team. Recommends source‑code scanning (sometimes ending up as shelfware), code signing/key management, tokenization, threat modeling, bug‑bounty options and mandatory no‑launch with SQL injection and XSS backed by executive exceptions.

AI-written summary · about

chapters (40)

  1. 0:00Introduction
  2. 3:00Giveaway
  3. 4:00Technical Challenges
  4. 5:00Renees Background
  5. 6:00Information Security is a Business Problem
  6. 7:00Application Security Drives a Long Train
  7. 8:00Why We Need to Change
  8. 9:00Research
  9. 10:00Data Breach Report
  10. 13:00Twoheaded dog
  11. 14:00Getting traction
  12. 15:00Enumerating email addresses
  13. 17:00They worked for me
  14. 18:00Renees Wall of Shame
  15. 19:00Application Security Can Drive a Long Train
  16. 20:00Application Security Is Vital to Our Future
  17. 21:00Application Security is the New Perimeter
  18. 22:00Seeking Engagement Not Compliance
  19. 23:00Uncontrolled Cost
  20. 24:00Matrix Approach
  21. 25:00Document Security Program
  22. 26:00Test Samples
  23. 27:00Executive Management Support
  24. 28:00Business Case
  25. 30:00Security Practices
  26. 32:00Website Attacks
  27. 33:00ThirdParty Connections
  28. 34:00Air Gap Networks
  29. 35:00Internet of Things
  30. 36:00Toilet Hack
  31. 38:00Software Distribution
  32. 39:00PCI
  33. 40:00Threat Modeling
  34. 41:00Encryption
  35. 42:00Emerging Trends
  36. 43:00New Agility
  37. 44:00Source Code Scanning
  38. 45:00Incident Response
  39. 47:00Create a Position Statement
  40. 48:00Why Application Security

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.