~/talk

OWASP Software Assurance Maturity Model (SAMM)

on YouTube 26m
Talkat OWASP Global AppSec San Francisco 2024 · 2024-09-23..09-27· [security]

speakers

name:Aram Hovsepyan
links:none on file
name:Sebastien Deleersnyder
x:sebadele

resources

video:https://youtu.be/s09XWP4j1No
slides:none on file

summary

SAMM presents a maturity model with levels 0–3, an assessment questionnaire that measures both coverage and quality of activities, direct mappings to frameworks including NIST SSDF and use of OpenC for crosswalks, and an anonymous Benchmark collecting 30 datasets with a composite average score of 144. Operations scores high (around 1.8) while verification and metrics score very low, and benchmarking and assessment guidance plus training and GitHub tools are available to apply and repeat assessments.

AI-written summary · about

chapters (6)

  1. 0:00OWASP SAMM introduction
  2. 3:52SAMM and security standards
  3. 8:06Benchmarking SAMM assessments
  4. 17:35Top and bottom SAMM activities
  5. 20:44SAMM resources and next steps
  6. 26:04Q&A

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.