Making Security Agile - Oleg Gryb - Saniay Tambe - AppSec California 2016
921 views · Published 22 March 2016 · 46:07 · Indexed 25 October 2026
Channel: OWASP Foundation · 2016 · Science & Technology
Many progressive IT organizations have already adopted agile methodologies and run in a CI/CD mode, while security processes and a level of security automation are still behind and can easily become a bottleneck if not changed. We’ll show in our presentation how to convert the old approach to application security to a more progressive and a faster one. You will also learn how to extend a leverage of a small security team by utilizing QA regression unit tests for security processes. Achieving a greater level of productivity and security automation by utilizing open source and commercial tools will be also covered in our talk. Oleg Gryb Samsung Strategy and Innovation Center Sr. Manager, Security Engineering Oleg Gryb is Security Architect working in the application security domain at Samsung Electronics Innovation Center. He was previously Security Architect at Intuit, where he was creating architecture for mission critical financial and business applications. Gryb participates actively in creating open source software in a security, identity management and other domains. He has a lot of passion around embedding security to all SDLC stages, threat modeling, enforcing security in web service fabric, security tools, cloud, IoT and mobile security. He’s also interested in building data protection solutions based on security appliances, such as Secure Elements for devices, nCipher, DataPower, Ingrian, Safenet. Sanjay Tambe Samsung Strategy and Innovation Center Security Architect Sanjay Tambe is working as Security Architect at Samsung Strategy & Innovation Center. He is working on security of cloud based SAMI Internet of Things (IoT) platform. Previously he worked as Core Security Champion at Intuit, where he ensured security of applications such as Mint running in AWS cloud. Prior to that he worked for Wells Fargo Bank as Security Specialist, VP where he ensured security of high volume customer facing web & mobile applications. He is very passionate about application security using Architectural reviews and Security Automation. He conducted Security Training workshops for Architects, Developers, QA, and managers. He has 12+ years of experience in security domain and 12+ years of handson experience in design & development of software applications. - Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project
More from this channel
-
45:50
Revenge of the Geeks: Hacking Fantasy Sports Sites - Dan Kuykendall
-
51:38
Application Security at DevOps Speed and portfolio scale - Jeff Williams
-
35:56
HTML5 JS Security - maty siman
-
44:33
CSRF: not all defenses are created equal - Ari Elias-Bachrach
-
42:24
Running at 99% Surviging an Application DoS: Ryan Huber
-
34:16
libinjection: from sqli to xss - Nick Galbreath
-
47:55
Million Browser Botnet - Jeremiah Grossman Matt Johanssen
-
46:05
Next Generation Red Teaming - Robert Wood