Using Evidence Based Security in Your Secure Development Lifecycle - Seguridad Mania.com - España y América Latina

All too often, security is stuck in the 1960’s doing slow desk checks, the results of which are usually out of date before the PDF report is dropped on an auditors desk. If a developer sees this report, it’s usually full of hot garbage. Security folks must become agile, become developers themselves and helping building secure applications, not critiquing and using recommendations from the last century. In this talk, learn about how you can contribute data and better remediation steps, and or use modern evidence based standards such as the forthcoming OWASP Top 10 2020 and the OWASP Application Security Verification Standard 4.0 in your development pipeline. If you are a security professional, you’ve probably heard this all before, but still we persist in doing the wrong things. Let’s not do security like it’s 1998, and build assurance in from the get go, and with each and every build.