Episode 17

Defining a Secure SDLC

A secure software-building pipeline is more than just the sum of its security tools. How an organization manages their tooling can mean the difference between AppSec chaos and AppSec success. Appropriate configuration, gaining visibility needed to make sense of tool outputs, collecting those outputs with the right frequency, and deciding when/where those tools are deployed stage-wise in the assembly line are all key process-oriented exercises. And like with any exercise, technique and consistency are everything!

Resources

Further listening

Understanding AppSec Part 3: Testing Your Code – DAST, Pentesting and Red Teaming

Episode 80

Understanding AppSec Part 2: Getting Your Code to the Cloud – IAC, Container Security, CSPM

Episode 79

Understanding AppSec Part 1: Securing Your Code – SCA and SAST

Episode 78

Scaling AppSec to Secure the Smallest Doors and the Biggest Buildings

Subscribe for updates

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

Preferences