AppSec, Ready, Set, Go!
summary
Covers practical challenges of launching Application Security (AppSec) programs in complex software ecosystems: dealing with expensive tool choices (SAST/DAST/IAST/RASP), shortage of AppSec specialists, immature engineering processes, and lack of metrics. Describes obstacles that prevent a successful AppSec start even when funding is approved, and discusses what needs attention to make an AppSec initiative operational.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:23Beginner team challenges
- 7:56AppSec maturity model
- 12:21Security engineering practices
- 19:06DevSecOps integration
- 24:26Metrics and effectiveness analysis
- 34:43Six success factors
- 37:19Summary and recommendations
- 39:10Q&A
related talks
33mJumpstarting Your Appsec Program
57mKeynote: Maturing Your Application Security Program
08mRunning an Appsec Program with Open Source Projects"
53mWhat is a software security initiative and do I need one?
26mHow to Build an Application Security Program
57mWhat’s in an AppSec program?
55mCan AppSec Be Fixed?
29mAppSec on a budget