Why AppSec Priorities Shift

In this session from LeanAppSec Live Fall 2024, we discuss the importance of top-down security integration, specificity in addressing security issues, and the role of security champions.

Speaker:
🎤 Jamie Scott, Founding Product Manager @ Endor Labs
🎤 Camilla Odlund, Founding Member Of Technical Staff @ Endor Labs
🎤 Darren Meyer, Staff Research Engineer @ Endor Labs

We cover:
00:00 Introduction to AppSec Priorities
00:23 Meet the Team: Experts in AppSec and Development
01:14 Challenges in Aligning Security and Development Priorities
02:01 Understanding Developer Motivations and Measurements
03:29 Effective Communication Between AppSec and Developers
06:16 The Role of QA in Security
06:54 The Impact of Organizational Structure on Security Prioritization
10:33 Developer and Product Manager Perspectives on Security
20:58 The Importance of Security Champions
23:33 Balancing Security and Usability
28:44 Adopting Security Tools for Development
29:15 Integrating Security into CI Pipeline
30:04 Balancing Development and Security
30:33 Effective Build Time Policies
32:05 Building Trust Between Security and Developers
33:27 Prioritizing Security in Product Management
35:53 Security as a Quality Issue
37:16 The Importance of Security Education
42:39 Aligning Incentives in AppSec
46:10 Communicating Vulnerabilities to Developers
50:40 The Role of Security Champions
54:09 Effective Security Training for Developers
56:05 Conclusion and Final Thoughts

—Learn More—
Jamie’s LinkedIn:
  / james-m-scott-iii  

Camilla’s LinkedIn:
  / camilla-odlund  

Darren’s LinkedIn:
  / darrenmeyer  

Research - Developers Prefer to Downgrade Than Upgrade Software Versions:
https://www.researchgate.net/publicat...

—LeanAppSec by Endor Labs—
LeanAppSec is an application security educational program by Endor Labs. It includes quarterly live events featuring industry experts (like this video) and on demand courses.
https://www.leanappsec.com

Follow on LinkedIn
  / leanappsec  

—Endor Labs—
Follow Us on LinkedIn   / endorlabs  
Learn More About Endor Labs https://www.endorlabs.com/