AppSec California 2017

The fact that software development is moving towards agile methodologies and DevOps is a given, the question is: How do you transform processes and tools to get the biggest advantage? Using application security testing as an example, this talk cuts through all the news, research, and standards to define a holistic process for integrating Agile testing and feedback into development teams. The talk describes specific processes, automation techniques, and the smart selection of tools to help organizations produce more secure, OWASP-compliant code and free up development time to focus on features.

Through a combination of workflows and real code examples, you'll learn about:
- Building a comprehensive compliance plan
- Integrating security testing into the SDLC
- Remediating real-world code vulnerabilities