Purple is the New Black: Modern Approaches to Application Security
summary
Combines defence, offence, automation, empathy and continuous learning into a practical app-sec playbook: adopt zero trust and assume breach mindsets; secure serverless/logic apps with API gateways, secret stores, per-function auth, logging to SIEM and alerts; treat third‑party code with SCA and use two SCA tools scanning both repos and build pipelines; classify cloud data, enforce service accounts, audit storage, and tighten container permissions; add RASP, file‑integrity monitoring, cloud‑native controls, service mesh, linting, throttling, and automated DevOps security tests.
AI-written summary · about
chapters (11)
- 0:00Intro
- 3:03Zero Trust
- 4:41Other New Things
- 8:05Software Supply Chain Security
- 10:17Online Storage Security
- 13:32Container Orchestration
- 16:24APIs and Microservices
- 17:29ServiceMatch
- 19:42Modern Tooling
- 21:03Unit Tests
- 21:37Dev Suckups
related talks
57mPurple is the New Black: Modern Approaches to Application Security
38mPrioritizing Trust While Creating Applications
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
45mThis is application purple teaming
56mThe Future of AppSec is Cloud-Native
39mColorful AppSec - Red, Blue, or Purple?
41mPurple Is the New Red - Providing the Most Value from Offensive Security
25mStandard Classification: Purple Teaming with PurpleTeam