How to spend $3.6mil on one coding mistake
summary
Average breach cost is $3.62M so a choice is clear: pay remediation or spend that on prevention — $3.6M buys ~3,600 code fixes or many training seats, static analysis, DAST/IAST and RASP trials. Static analysis surfaces ~700 categories but yields false positives; a $20k pentest that finds 10 issues plus $2k per-issue dev fixes costs ~$4k each. Enforce parameterized queries everywhere to eradicate SQLi, measure training impact, treat RASP as hard to deploy in production, and use tooling plus coding guidelines.
AI-written summary · about
chapters (8)
- 0:00Start
- 2:29Application Security
- 4:50Sequel Injection
- 9:27Where Do Mistakes Happen
- 12:14Static Analysis
- 12:50Interactive Application Security
- 13:43Where Do We Spend Money
- 29:06The Impact of Training
related talks
01h 06mEscaping Vulnerability Hell: Bridging the Gap Between Developers and Security Teams
35mPrevention vs. Response - Cybersec Economics in the Modern Era
46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!
28mBreaches Are Everywhere; What's a Good Security Leader to Do
35mDevSecOps in practice. Tools vs People!
49mPanel: From Code to Defense: Why Developers Are the New Security Leaders
43mClean code, is it really worth it? A story about monsters and...
45mHow to win friends and influence your security team