AppSec EU 2017 Application Security For DevSecOps by Joseph Feiman
534 views · Published 26 May 2017 · 28:56 · Indexed 10 November 2026
Channel: OWASP Foundation · 2017 · Science & Technology
Full title: Don’t Learn, Don’t See, Don’t Run: Application Security for DevSecOps DevOps has not yet become DevSecOps, leaving DevOps insecure. What is preventing security from integration into DevOps and CI/CD? This presentation offers the answer. It defines capabilities that application security should adopt, explains how existing technologies should change, forecasts emerging technologies, and estimates the pace of application security transformation in the era of DevOps. In this presentation, we prove a hypothesis that DevSecOps is in need of technologies with specific features – technologies that application development, operation, and security specialists don't have to learn, see, and run. Only these technologies will seamlessly integrate into DevOps, making it DevSecOps. Attendees of this session will learn what will come to the market within the next three years, how to plan adoption, and what will or will not work in the era when application security transforms to enable DevSecOps. - Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project
More from this channel
-
45:50
Revenge of the Geeks: Hacking Fantasy Sports Sites - Dan Kuykendall
-
51:38
Application Security at DevOps Speed and portfolio scale - Jeff Williams
-
35:56
HTML5 JS Security - maty siman
-
44:33
CSRF: not all defenses are created equal - Ari Elias-Bachrach
-
42:24
Running at 99% Surviging an Application DoS: Ryan Huber
-
34:16
libinjection: from sqli to xss - Nick Galbreath
-
47:55
Million Browser Botnet - Jeremiah Grossman Matt Johanssen
-
46:05
Next Generation Red Teaming - Robert Wood