DevSecOps Summit: Embracing DevSecOps through Embedded Application Security
Traditional approaches to application security create unacceptable drag and scaling problems for DevOps, while expert staffing and tooling requirements to support “more code, faster” create untenable economics. This presentation will discuss the transformative impact of embedding application security into applications themselves. Embedded AppSec removes friction, enables security to be seamlessly woven into DevOps, and provides a continuous and unified approach across the SDLC that empowers Dev, Security, QA/Test, Ops, and other stakeholders to collaborate and realize the benefits of DevSecOps. Discussion points include:
- The economic, technical, and logistical challenges when AppSec meets DevOps
- The benefits of embedded AppSec over legacy approaches, and why current solutions can’t scale
- Why instrumenting applications results in higher levels of speed and accuracy in identifying vulnerabilities and blocking attacks
- A free jumpstart to DevSecOps using Embedded AppSec: Interactive Applications Security Testing (IAST) and Runtime Application Self-Protection (RASP)
Takeaways:
- Free tooling to jumpstart your DevSecOps journey
- Demonstration using a free IAST/RASP environment
Robert Statsinger has worked in Application Security for the past few years. His prior experience includes Applications Performance Management and its impact on DevOps, Intelligent Device Management, Enterprise Applications Integration, and developer tools and middleware. Robert holds a Masters Degree in Computer Science from the University of Southern California. Robert has spoken extensively on this topic and conducts hands-on workshops to introduce engineers and security practitioners directly to the benefits of Embedded AppSec. Connect with Robert on LinkedIn.