Agnition - The Security Code Review Swiss Army Knife - David Rook - Hack in Paris

Discover how to implement effective security code review processes with Agnition in this comprehensive talk from Hack in Paris. Learn about the challenges of teaching developers to write secure code, helping security professionals identify vulnerabilities, and producing application security metrics with integrity checks and audit trails. Explore the features of Agnition, a free security code review tool, including application profiles, a 60-question security checklist, and built-in secure coding guidance. Witness demonstrations of how Agnition addresses repeatability, integrity, and audit trail concerns while automatically generating metrics and reports. Gain insights into the limitations of automated tools, the principles of secure development, and the importance of checklists in various industries. Discover the new features of Agnition v2.0, including expanded guidance, additional report types, and an automated source code analysis module.