~/talk

OWASP SAMM2: Your Dynamic Software Security Journey

on YouTube 46m
TalkinDutchat OWASP Global AppSec Amsterdam 2019 · on Monday, 2019-09-23· [security, devops-and-delivery]

speaker

name:Sebastien Deleersnyder
x:sebadele

resources

video:https://youtu.be/gNp1QTrGzx8
slides:none on file

summary

OWASP SAMM2 is a concrete software security maturity model that defines measurable activities, four scoring levels (zero to mastery), and five business functions: governance, design, implementation, verification, and operations. It organizes security practices into streams per practice, adds quality criteria and scoped self-assessments, supports migration from SAMM1, and provides a machine-driven automated toolbox that generates website and assessment artifacts; the project separates design and implementation work and targets a final release by end of 2019.

AI-written summary · about

chapters (16)

  1. 0:00SAMM2 journey intro
  2. 1:50Project evolution
  3. 3:34Need for maturity model
  4. 5:42SAMM2 core concepts
  5. 8:51Business functions
  6. 11:24Maturity levels
  7. 14:35Conducting assessments
  8. 17:24Measuring quality
  9. 21:20Streams in model
  10. 24:11Deployment security
  11. 27:42Simplified measurements
  12. 30:09New toolbox
  13. 33:20Activities and guidance
  14. 36:34Community plans
  15. 39:02Project team
  16. 40:09Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.