The Practicalities of Pen Testing at Scale
summary
Covers the role of penetration testing in security and software development life cycles, explaining why pentesting at scale matters and what business value it provides. Describes practical methods and approaches for implementing large-scale pentesting programs when organizations face limited budgets, talent, and guidance, and provides historical context for pentesting practices.
AI-written summary · about
chapters (19)
- 0:00Start
- 0:37Caroline Wong
- 4:48Owasp Top 10
- 8:47Practitioner's Guide to Application Security
- 13:54State of Devops Report
- 19:03Pen Test Maturity Model
- 19:27Research Findings from Our 2022 State of Pen Testing Report
- 22:06Top Vulnerability Categories
- 22:26Server Security Misconfigurations
- 24:09Low or Informational Weak Password Policy
- 30:46De-Prioritization of Security Posture and Collaboration
- 32:10Scale Pen Testing Advice
- 32:25When Does an Organization Need a Pen Test
- 34:22Finding Fixing Vulnerabilities Is Hard
- 38:23The Ptas Book
- 39:34Security Is Not a Vitamin or a Band-Aid
- 42:53How Do You Incentive an Organization To Invest in Pen Test Instead of You
- 43:14Incident Response Log
- 44:35What Do You Do with Slack Fatigue
related talks
33mThe Practicalities Of Pentesting At Scale
20mMaking Penetration Tests Actually Useful
52mApplication Penetration Testing – DOs and DON‘Ts
33mWorking with penetration testers as a developer
56mBuilding An Effective Application Penetration Testing Team
28mBeyond Penetration Testing: Developing a Defensive Cyber-Workforce
44mApplication Security: Everything we know is wrong
39mAre Pentests Relevant with Bug Bounties