Purple is the New Black: Modern Approaches to Application Security
summary
Practical checklist for modern app security: adopt zero trust and assume breach design, log everything and feed serverless and workflow logs into a SIEM, front serverless functions with an API Gateway (auth, rate limit, input validation), isolate function parameters and make each function its own secured island, run SCA in CI and back up code repos and CICD configs, enforce container quotas and no-root containers, disable unused HTTP verbs, and automate fixes via DevSecOps pipelines so slow scans run in parallel without blocking deploys.
AI-written summary · about
chapters (12)
- 0:00Welcome
- 3:59Red/blue/purple teams explained
- 10:16Purple team collaboration
- 20:30Zero trust basics
- 23:46Securing serverless workflows
- 27:57Third-party components
- 31:10Storage and container security
- 37:13API and microservice security
- 42:31Automating DevSecOps
- 46:22Continuous learning
- 51:40Culture change resources
- 53:10Q&A
related talks
24mPurple is the New Black: Modern Approaches to Application Security
38mPrioritizing Trust While Creating Applications
45mBuilding Secure Software: Practical Strategies for Developers
56mThe Future of AppSec is Cloud-Native
46mApplication security from start to finish
41mPanel: Securing Cloud Native Applications
29mSecuring Your Web Application Pipeline From Intruders
01h 04mTransformation Blueprint for Developer-Centric Application Security