Keynote: Every Security Team is a Software Team Now
summary
The keynote examines how Agile and DevOps cultural changes pushed product, QA and ops into cross-functional software teams and argues security must follow the same path. It discusses teams owning security responsibilities and security groups becoming internal security-software teams that build platforms, self-service tools and automation (cloud/serverless contexts are referenced) to reduce organizational risk while preserving developer productivity.
AI-written summary · about
chapters (16)
- 0:00Welcome and community
- 4:56Communication challenges
- 9:32Security trends and stories
- 15:23Keynote introduction
- 18:23Early hacking experiences
- 23:53Finding vulnerabilities
- 26:03Pwn2Own and defensive work
- 29:50Evolving security roles
- 33:29Jobs to be done theory
- 37:27History of UNIX
- 45:07Leverage and fuzzing
- 49:16DevOps culture and safety
- 51:53Blame-free learning
- 55:02Managing fear and risk
- 1:01:05Conclusion
- 1:02:42Housekeeping announcements
related talks
38mKeynote: Dumping Traditional Security Teams
25mKeynote: DevOps - The Return of Security
13mKeynote: Software Security: _You_ are the Calvary
10mKeynote: CloudNativeDevSecOps
15mKeynote: The Security Symphony
01h 26mKeynote Presentation Software Defined Security Governance
43mOpening Keynote - Flipping the script
15mKeynote: The Rise of DevSecOps