Towards Intelligent Application Security

Explore the evolution of application security in this 52-minute conference talk by Dr. Cristina Cifuentes. Trace the development from Static Application Security Testing (SAST) to Dynamic Application Security Testing (DAST), and learn about newer approaches like Interactive Application Security Testing (IAST), Software Composition Analysis (SCA), Web Application Firewalls (WAF), and Runtime Application Self Protection (RASP). Examine the shift from DevOps to DevSecOps, integrating security into the software development lifecycle. Discover how machine learning and program synthesis are being applied to improve code quality and efficiency. Delve into Dr. Cifuentes' vision for an automated, intelligent approach to application security that incorporates signals from code operations, automation, and threat intelligence. Gain insights into the future of application security in a rapidly evolving technological landscape.