Opening Keynote - Flipping the script
summary
Argues that scaling software security means shifting beyond tools to changing culture and buyers: publishes SAFECode practices and a forthcoming updated fundamentals doc; pushes executive sponsorship and embedding security into PM playbooks; converts QA to do security testing using six-week workshops with an expert spending 80% break 20% transfer; treats vulnerabilities as bugs with security severity metrics; tells procurement to require vendor development process not source code; urges ALM-integrated scanning, ML-smarter appsec, and mandatory security in CS curricula.
AI-written summary · about
chapters (7)
- 0:00Introduction to safe code
- 2:52The state of software security
- 7:03The three stakeholders
- 14:00The importance of culture
- 18:02Strategies for cultural change
- 28:45Long-term industry shifts
- 36:28Q&A session
related talks
40mClosing Keynote: New Era of Software with modern Application Security
38mKeynote: Dumping Traditional Security Teams
49mKeynote: CISO Perspectives
40mMaking Security an integrated part of the SW Dev Lifecycle
31mTopics of Interest: Scaling AppSec through Education
40mKEYNOTE: Delivering software that is secure & usable - who’s job is it?
13mKeynote: Software Security: _You_ are the Calvary
06mSponsored Keynote: Trust and Risk in the Software Supply Chain