We can't find the internet
Attempting to reconnect
Something went wrong!
Hang in there while we get back on track
SAINTCON 2016 - Chad Butler - Big Shop AppSec for Everyone Else
Make app sec accessible to everyone with big shop approaches from Boeing, test-driven development, and more, for accelerated adoption and effective security testing.
- Test-driven development applies to security testing, focusing on writing tests before code.
- Boeing’s approach to app sec involves transparency and collaboration.
- Conflict between security teams and developers arises when the former focus too much on security, rather than sharing knowledge.
- Guiding developers with high-level requirements and principles accelerates adoption.
- Penetration testing with a cadence promotes regular security testing.
- Threat modeling can be applied to software development lifecycle by analyzing potential threats.
- Reducing complexity and using familiar tools (e.g., JIRA) promotes adoption.
- Focusing on high-impact areas ensures effective security testing.
- ASVS (Application Security Verification Standard) is a valuable resource for security requirements.
- Bitfang OWASP provides guidelines and best practices for software security.
- Dynamic scanning is a cost-effective way to ensure security.
- Vulnerability remediation involves developing processes and tools for identifying and fixing issues.