Loading…
Back To Schedule
Wednesday, January 25 • 10:30am - 11:20am
AppSec Pipelines and Event-based Security: Moving beyond a traditional security test.

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Is software development outpacing your ability to secure your company’s portfolio of apps? You don’t have to buy into Agile, DevOps or CI/CD to realize the business wants to move faster. And it's not like you didn’t already have more than enough to do. This talk will cover how to take the lessons learned from forward thinking software development and show you how they have been applied across several business. This isn’t a theoretical talk. It covers the results of successfully applying these strategies to AppSec across multiple companies ranging from 4,000 to 40,000+ employees. Yes, real stats on improvements seen will be provided.

By changing focus from a point in time security testing and assessments to automation, continual health checks and event-based security, your AppSec program can start to keep pace with the increasing speed of delivery your business is trying to obtain. By embracing the same methodologies, you can turn Docker from a problem to how you horizontally scale your security work. Don't swim against the current of DevOps, Agile software development and Continuous Delivery. Instead use those movements to speed your AppSec program to new levels.

Speakers
avatar for Matt Tesauro

Matt Tesauro

Security Engineer, Citizen of the World
Matt Tesauro is currently rolling out AppSec automation at a major financial institution and is a founder of 10Security.  Prior work included the Director of Community and Operations at the OWASP Foundation, Senior AppSec Engineer building an AppSec Pipeline and continuous security... Read More →



Wednesday January 25, 2017 10:30am - 11:20am PST
Garden Terrace Room