Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Can AppSec Training Really Make Developers Security-Smart?

OWASP Foundation via YouTube

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore the effectiveness of AppSec training for developers in this 33-minute OWASP Foundation conference talk. Dive into the results of a yearlong survey of nearly 1,000 software developers, assessing their application security knowledge before and after formal training. Examine the survey methodology, which includes developers from various backgrounds and industries, and discover the surprising findings from a "retest" of a subset of respondents. Learn about the gap between security awareness and prescriptive knowledge, the impact of sample fatigue, and unexpected results from technology companies. Gain insights into how developers learn, the importance of asynchronous learning, and the role of incentives in security training. Understand the implications of these findings for application risk managers and those relying on training as part of their application security strategy.

Syllabus

Introduction
Denim Group
Bruce Schneier
AppSec vs Developer Training
Training is one of those sacred cows
Background on the project
Lack of workforce analytics
Research
Have You Had Any Training
How We Did It
Three Big hypotheses
Sample questions
prescriptive questions
results
gap between awareness and prescriptive
sample fatigue
weird results
technology companies
no prior secure coding
How Developers Learn
Asynchronous Learning
Dont Ignore the Basics
Incentives Matter
Conclusions
Whats next

Taught by

OWASP Foundation

Reviews

Start your review of Can AppSec Training Really Make Developers Security-Smart?

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.