Test Smarter Security Essentials for Quality Engineers
summary
Claims five must-have security practices for quality engineers, shows a real banking breach caused by an unprotected API endpoint that allowed unauthorized withdrawals (personal example with ~ $150k drained), and says about 80–85% of modern attacks target APIs. Recommends integrating automated scanners into CI/CD so deploys block on failures, running dependency checks to prevent supply‑chain attacks, and automating negative API tests. Demonstrates AI‑assisted scanning from a masters project that finds vulnerabilities, and names practical tools: OWASP ZAP, Burp Suite, SonarQube.
AI-written summary · about
chapters (8)
- 0:00Security testing introduction
- 2:39Why security is QE's job
- 12:58Five security essentials
- 18:39Beyond penetration tests
- 21:54Automating security in CI/CD
- 25:29Security-first culture
- 27:35Future of security testing
- 30:07Q&A
related talks
26mBeyond Testing: Application Security in the Age of DevOps
33mWhy Developers Struggle with API Security
44mSecurity Practices Useful in Agile Development
37mDeploying Security Testing Practice in Your Team and Company
16mDo the Right thing, shift Left!
24mAPI Security in DevSecOps: Built-In, Not Bolted On
15mJumpstart Security & Penetration Testing APIs
27mHow to Start Security Testing Without Fear