Explore a comprehensive conference talk that challenges the current approach to application security and advocates for a shift from secure coding to secure software development processes. Delve into practical strategies for enhancing security throughout the entire Software Development Life Cycle (SDLC), from initial design to ongoing maintenance. Learn why focusing solely on secure code is insufficient and discover actionable steps to implement across various stages of development, applicable for individual team members and complex projects alike. Gain insights into design, coding, testing, deployment, and support phases, with a focus on creating holistic secure systems rather than just secure code. Benefit from the speaker's expertise in AppSec, DevSecOps, and secure development practices to elevate your approach to software security.
So Long, Secure Coding - Shifting from Syntax to Secure Software Development Processes
Overview
Syllabus
Intro
AppSec
World is not as mature as we think
SDLC
Design
Code
Test
Deploy
Support
Summary
Outro
Taught by
GOTO Conferences
