Chris Romeo
where else to find them
what they talk about
where they keep going back
no series more than once — all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Tanya Janca30 talks
- Christopher Romeo7 talks
- John Dickson10 talks
- Laura Bell13 talks
- Siren Hofvander5 talks
- Peter Chestna5 talks
| title | conference | date |
|---|---|---|
| Developers Dislike Security: Ten Frustrations and Resolutions | RSAC 2021 | 2021-05-17 |
Lists ten frustrations developers voice (loud tools, false positives, gatekeeping, no time, shifting guidance) and gives concrete fixes: security coaching… | ||
| Security Culture Hacking: Disrupting the Security Status Quo | OWASP AppSec USA 2018 | 2018-10-11 |
Profiles anonymous orgs vs external story, offers 15 hacks and a 30-60-90-1-year plan that were used at scale (examples from 5 to 25,000 developers), points to… | ||
| How to Transform Developers into Security People | NDC TechTown 2018 | 2018-09-27 |
Argues that developers must be the first line of defense because training alone doesn't change mindset, classifying responses as unfamiliar, overworked… | ||
| Threat Modeling: uncover vulnerabilities without looking at code | NDC TechTown 2018 | 2018-09-27 |
Shows how to pick a small feature, draw a simple data flow diagram with trust boundaries and attack surface, then run STRIDE to find specific flaws like… | ||
| Building an AppSec Program with a Budget of $0: Beyond the OWASP Top 10 | OWASP AppSec Europe 2018 | 2018-07-02 |
Claims that a complete AppSec program can be built with zero budget using OWASP projects and a small staff; concrete components and steps matter. Use ASVS and… | ||
| nothing matches | ||