Winning - the future perspective in the next 20 years!
summary
Claims that current practice fails and prescribes concrete changes: stop PDF pen‑test dumps and DefectDojo backlog hoarding, push vulnerability tests into CI/CD as automated unit/integration checks, and wire findings into dev issue trackers and dashboards. Cites the 1979 origin of 30‑day password rotation and warns tools like Juice Shop can run hundreds of tests per build so pen testers risk replacement within five years. Urges adoption of NIST 863, learning to code (Python/JavaScript), and fixing frameworks so secure defaults actually work.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:42Who Andrew Is and What He Is to the Ojas Foundation
- 5:27First Nist Special Publication
- 7:43Where Password Rotation Came from
- 18:08How Many People Still Have an Enterprise Architecture Function
- 19:00Design Flaws
- 29:31Build Secure Software
- 33:36Executive Friendly Reporting
- 36:53Learn How To Code
- 37:57Learn from Your Developers
- 39:38The Future Is Remote Work
related talks
51mBigger, Faster and More Secure
44mApplication Security: Everything we know is wrong
56mBuilding An Effective Application Penetration Testing Team
51mSecurity & Privacy in Digital First Businesses (Panel)
20mHow to Use Your Vulnerabilities to Train Your Developers on Security
46mFire, Brimstone, and Bad Security Decisions
40mClosing Keynote: New Era of Software with modern Application Security
31mHow to get everyone to get on board with software security: practical tips and suggestions.