Secure Software Development Lifecycle

on YouTube ↗20m

" summary

Advocates publishing a simple SDLC as the Brown M&M — a quick checklist that signals whether safety practices exist, and tailoring ASVS (≈200 requirements) into a short, project‑specific list. Recommends building reusable secure‑coding libraries and framework components, automating builds/tests/deploys (DevOps), and running static code analysis while triaging results before handing them to developers. Claims early requirements and automation cut cost; warns scanners are costly and noisy.

AI-written summary · about

" chapters (4)

1. 0:00Intro
2. 0:21Software Development Lifecycle
3. 8:09DevOps
4. 15:20Security

" related talks

• 56mSo Long Secure Coding - Practical Steps for Securing the entire SDLCLaura Bell Main · NDC Sydney 2024
• 26mSimple Guide to Secure SDLCAudrey Nahrvar · NDC Oslo 2018
• 40mMaking Security an integrated part of the SW Dev LifecycleSiren Hofvander · DevOne Detroit 2018
• 55mBuilding a sustainable security requirements process with the ASVSJosh Grossman · NDC Security 2023
• 40mDevSecOps Guide to Bulletproof Your Development WorkflowRicardo Magalhães · Øredev 2025
• 45mMaturing Your Application Security Program with ASVS-Driven DevelopmentAram Hovsepyan · OWASP Global AppSec San Francisco 2024
• 38mSecure Software Development Framework: Towards an SDL for all SDLCsDamilare D. Fagbemi · OWASP AppSec Europe 2018
• 48mDesigning a Secure Software Development Lifecycle with DevOpsMike Long · NDC Security Oslo 2020