Don't Feed the Hippos
Talkat OWASP AppSec Europe 2018 · on Thursday, 2018-07-05· at 13:30· Westminster - 4th Floor, QEII Centre Broad Sanctuary, Westminster·
summary
Argues that security wins when it listens and embeds with dev teams and shows concrete fixes not fear: replaces remote checklists with two-hour team intakes, warns about rushed audits like 20 hours vs 6–9 months of development, prioritises tooling that reduces developer friction and false positives rather than only hunting false negatives, recommends automating controls (ACS 185 → targeted checklist) and shipping a Security Knowledge Framework with code examples so developers can implement and verify changes in their sprint cadence.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:40I dont you motorbike
- 3:10People traded teams
- 6:33Twerking Africa
- 8:10The Hippo Cell
- 11:06Fear Uncertainty
- 15:13DevOps
- 17:20Be Visible
- 18:21Meeting
- 21:05Security
- 26:15Developer vs Security
- 30:25Why do we have brakes
- 31:35The world understanding of the user
related talks
22mThe Hip Approach to Safeguarding your Users
40mMaking Security an integrated part of the SW Dev Lifecycle
20mThe road to developers' hearts
01h 04mShifting Security Everywhere
29mPainless Agile Security
39mProactive Security, less buzzword, more action
27mSecurity Learns to Sprint: DevSecOps
46mApplication Security in an Agile World