Can AppSec Training Really Make a Smarter Developer?

Explore the effectiveness of application security training for developers in this 45-minute conference talk by John Dickson, Principal at Denim Group. Delve into the results of a year-long survey involving nearly 1,000 software developers, assessing their application security knowledge before and after formal training. Examine the debate surrounding developer training, from its importance in software security programs to criticisms of it being "compliance-ware." Discover surprising findings from a retest of a subset of respondents, revealing crucial information for application risk managers relying on training as part of their security strategy. Gain insights into developers' exposure to secure development concepts across various backgrounds and industries, and learn about the long-term retention of security knowledge post-training.