Developers and Application Security - Who is Responsible?

Explore the findings of a 2014 study on application security responsibility in the software development lifecycle in this 32-minute USENIX LISA14 conference talk. Delve into disturbing discoveries about security assurance in the SDLC, and discuss potential solutions with survey sponsors. Examine the implications of networking household appliances, embedding open source components, and allowing unmonitored access to personal data. Consider the risks associated with unvalidated software components in major applications and vehicles. Gain insights into building a community of DevOps and AppSec practitioners to address these critical issues through various platforms. Receive a copy of the survey results and analysis notes to further your understanding of application security responsibilities.