Stop Chasing Vulnerabilities - Introducing Continuous Application Security
summary
Describes how to apply Continuous Integration/Continuous Delivery principles to application security by integrating open-source tools—OWASP ZAP, Mozilla Minion, Gauntlt, and others—into an automated, portfolio-wide security pipeline. Shows a practical architecture that feeds results into a real-time application security dashboard and uses analytics to shift focus from ad hoc vulnerability hunting to enterprise-level security assurance.
AI-written summary · about
chapters (11)
- 0:00Start
- 21:30Effort peaks, high risk
- 24:39Continuous AppSec
- 33:06Make Security Visible
- 36:39Take Control of Security
- 40:11Know Your Enemy
- 40:24Implement Strong Defenses
- 40:57Hack Yourself
- 42:31Expect Failure
- 42:45Promote Security Culture
- 43:15The Ball Don't Lie
related talks
42mContinuous Security: Integrate security tools into your DevOps Pipeline
52mApplication Security at DevOps Speed and portfolio scale
29mSecuring Your Web Application Pipeline From Intruders
23mContinuous Security
41mSkillful, Scalefull Fullstack Security in a State of Constant Flux
46mSecurity DevOps - Staying Secure In Agile Projects
46mJuggling the Elephants: Making AppSec a Continuous Program
48mAppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program