Learn how to improve collaboration between security professionals and developers in this 43-minute conference talk from BSides Cleveland 2016. Explore the perspectives of both security teams and developers, understand common work-flow models, and discover strategies to bridge the gap between these two crucial roles. Gain insights into effective training methods, essential tools, and engagement techniques that can enhance the integration of security practices into the development process. Walk away with practical first steps to foster a more productive working relationship between security and development teams.
Overview
Syllabus
Intro
Who is this dude?
What This talk is NOT about.
The General Issue (cont)
Security's perspective
The Developer's Perspective
Our Working Relationship
The Developer's work-flow(Waterfall)
The Developer's work-flow(Agile)
What we're doing wrong
What I'm really saying here is
How can security fit into development?
Training
Tools
Engagement
First steps to making it better
Conclusion
