RSA Conference 2020 DevSecOps & Application Security
2020-02-24..2020-02-28
San Francisco, United States
[RSA Conference 2011, RSA Conference 2013, RSA Conference 2014, RSA Conference 2015 Asia Pacific & Japan, RSA Conference 2016, RSA Conference 2016 Abu Dhabi, RSA Conference 2017, RSA Conference 2018, RSA Conference 2019 DevOps Connect: DevSecOps Day, RSA Conference 2020 DevSecOps & Application Security, RSA Conference 2020: Mobile & IoT Security, RSA Conference 2023, RSA Conference 2024, RSA Conference 2026]
| title | author | length |
|---|---|---|
| Collaborating to Improve Open Source Security: How the Ecosystem Is Stepping Up | Mark Russinovich | 52m |
Cloud platform codebase includes vast open source dependencies and attackers have backdoored packages like Event-Stream and left-pad or removed last-good… | ||
| Using the Hacker Persona to Build Your DevSecOps Pipeline | Aaron Estes, Robin Yeman | 41m |
Dr. Aaron Estes, Lockheed Martin Fellow, Lockheed Martin
Robin Yeman, Lockheed Martin Sr. Fellow, Lockheed Martin
The requirement to build mission critical… | ||
| Building a Comprehensive IoT Security Testing Methodology | Deral Heiland | 53m |
Deral Heiland, Research Lead, IoT, Rapid7
This presentation will focus on building an effective security testing methodologies for Internet of things (IoT)… | ||
| The Emerging Role of the CPSO | Stephanie Domas | 43m |
Stephanie Domas, CPSO and Executive Vice President, MedSec
You need a CPSO. Likely you’re wondering “why? and what’s a CPSO?” That is a problem. Millions of… | ||
| Secure Sandboxing in a Post-Spectre World | Jonathan Foote, Tyler McMullen | 47m |
Jonathan Foote, Principal Security Architect, Fastly
Tyler McMullen, Chief Technology Officer, Fastly
In the pursuit of stronger and more efficient ways to… | ||
| Parlez-Vous Policies? Translate Policies into Powerful Development Tools | Jen Trahan | 49m |
Jen Trahan, Senior Director of Application Security, Discovery Inc.
Corporate security policies are a key component to any business, but unfortunately, by… | ||
| How to Harness Dev and Their Native Tools to Accelerate DevSecOps | Cindy Blake | 46m |
Cindy Blake, Sr. Security Evangelist, GitLab
This step-by-step view through the developers’ workflow will show exactly where application security can be… | ||
| Which Developers and Teams Are More Likely to Write Vulnerable Software? | Anita D'Amico | 43m |
Anita D’Amico, CEO, Code Dx, Inc.
Are some developers and dev teams more likely to inadvertently introduce vulnerabilities into their code? This talk will… | ||
| At What Point Does DevSecOps Become Too Risky for the Business? | Altaz Valani, Hasan Yasar | 49m |
Altaz Valani, Research Director, Security Compass
Hasan Yasar, Technical Director, SSD Division at Software Engineering Institute, Carnegie Mellon… | ||
| Challenges in Android Supply Chain Analysis | Łukasz Siewierski | 48m |
Łukasz Siewierski, Reverse Engineer, Google
Android supply chain is a complex ecosystem of software and hardware companies, which include SoC manufacturers… | ||
| Hey Google, Activate Spyware! When Google Assistant Uses a Vulnerability as a Feature | Erez Yalon | 25m |
Erez Yalon, Director of Security Research, Checkmarx
This talk will highlight serious security findings in Android smartphones, enabling attackers to remotely… | ||
| Third-Party Code: Where Data Breaches, Election Meddling, Ad Fraud Converge | Mark Grantz, Chris Olson | 55m |
Mark Grantz, Supervisory Special Agent, US Secret Service
Chris Olson, CEO, Founder, The Media Trust
The presenters will examine a recent case to show how… | ||
| Case Files from 20 Years of Business Logic Flaws | Chetan Conikee | 50m |
Chetan Conikee, Chief Technology Officer, ShiftLeft, Inc.
What do Citibank, First American Financial, McDonald’s, Nordstrom and Signet/Jared Jewelers have in… | ||
| 8 Million Findings in One Year: Fresh Look at the State of Software Security | Jay Jacobs, Chris Wysopal | 53m |
Jay Jacobs, Co-founder and Chief Data Scientist, Cyentia Institute
Chris Wysopal, Co-Founder and Chief Technology Officer, Veracode
What can we learn from 8.3… | ||
| Secure Your Code from Open Source Vulnerabilities | Megha Dixit | 40m |
Megha Dixit, Technical Program Manager Security, Salesforce
Developers are the “smart” community; they would like to churn out the features faster. In the… | ||
| Standing Up a Successful Product Security Program | Andre Ristaino, Matthew Bohne, Paul Forney, Nick Ritter, Megan Samford | 51m |
Moderator:
Andre Ristaino, Managing Director, International Society of Automation
Panelists:
Matthew Bohne, VP, Chief Product Security Officer, Honeywell… | ||
| Compromising Kubernetes Cluster by Exploiting RBAC Permissions | Eviatar Gerzi | 49m |
Eviatar Gerzi, Security Researcher, CyberArk
Attackers are increasingly targeting Kubernetes clusters to compromise applications or abuse resources for things… | ||
| 10 Things I Wish Every Developer Knew about Security | Christopher Romeo | 48m |
Christopher Romeo, CEO, Security Journey
Do your developers understand security enough to secure your applications properly? A large number of security issues… | ||
| Proactive Container Security for the Masses | Ross Turk | 40m |
Ross Turk, Vice President, Anchore
Linux Containers help DevOps teams hide complexity and reuse work more efficiently. But they can also allow vulnerabilities… | ||
| Time to Spell Out Open Source Software Security | Brittany O’Shea | 43m |
Brittany O’Shea, Senior Manager, Veracode
Join this session to hear direct and concise information on how open source software (OSS) is done, much more than… | ||
| API Abuse through Mobile Apps: New Attacks, New Defenses | Skip Hovsmith | 50m |
Skip Hovsmith, Principal Engineer, CriticalBlue
Planning on introducing a mobile app into your product mix? Expect new attacks on your API infrastructure… | ||
| IoT Bug Hunting: From Shells to Responsible Disclosure | Shaun Mirani, Ian Sindermann | 31m |
Shaun Mirani, Security Analyst, Independent Security Evaluators
Ian Sindermann, Associate Security Analyst 2, Independent Security Evaluators
Internet of… | ||
| Next-Gen IoT Botnets 3: Bad Implementations of Good Cloud Platforms | Alex Jay Balan | 31m |
Alex Jay Balan, Chief Security Researcher, Bitdefender
With most IoTs moving towards cloud platforms, it seemed appropriate to look at their implementations… | ||
| Solving for DevOps Auditors with Automated Compliance | Shannon Lietz, Michelle Nikulshin | 42m |
Shannon Lietz, Director, Intuit
Michelle Nikulshin, Director, Information Security, Intuit, Inc.
Automated compliance when it comes to DevOps? It wasn’t what… | ||
| nothing matches | ||