Aaron Weaver
where else to find them
no profile links on file
what they talk about
where they keep going back
no series more than once — all 6 in the filters
on a stage with
- Matt Tesauro3×
- Bill Thompsononce
- David Ohsieonce
who talks about the same things
- Matt Tesauro19 talks
- Jeroen Willemsen8 talks
- Tanya Janca30 talks
- Jeff Williams13 talks
- Stefania Chaplin3 talks
- James Wickett14 talks
| title | conference | date |
|---|---|---|
| Flagship Projects: DefectDojo | OWASP 20th Anniversary 2021 | 2021-09-24 |
OWASP DefectDojo claims to consolidate and dedupe findings from many scanners and it actually ingests 100+ tool parsers into a Django/Python backend with a… | ||
| Making Continuous Security a Reality with OWASP’s AppSec Pipeline | OWASP AppSec Europe 2018 | 2018-07-02 |
Practical demonstration of an implemented pipeline that runs prebuilt docker containers for static and dynamic checks, pushes normalized results into OWASP… | ||
| Building a Secure DevOps Pipeline | AppSec USA 2017 | 2017-09-19 |
Shows how a security pipeline that normalizes scanner output into a central vulnerability DB and uses REST APIs, Docker, ZAP and Jenkins to weaponize Jenkins… | ||
| Interview with | Velocity Conference New York 2015 | 2015-09-28 |
AppSec now covers web, APIs and IoT and focuses on keeping company data private and avoiding breaches; typical staffing is tiny—ops to dev ~2:1 and 100 to 1… | ||
| Building An AppSec Pipeline: Keeping Your Program, And Your Life, Sane | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Case study of an AppSec pipeline that actually ships: a three‑month MVP called Bag of Holding (Python/Django) holds inventory and engagements, orchestrates… | ||
| Leveraging OWASP in Open Source Projects | AppSecUSA 2013 | 2013-11-20 |
CAS AppSec Working Group applies OWASP resources to Jasig CAS and shows concrete results: data‑flow diagrams and OWASP STRIDE threat modeling, plus static and… | ||
| nothing matches | ||