Overwhelmed by Vulnerability Triage Hear a Blend of Finest Best Practices
summary
Names actual tools and testing types, shows a three‑phase triage flow (pre‑analysis → target → release), and measures outcomes like false positives and false negatives rather than vague examples. Describes SAST, DAST and IAST tradeoffs (SAST DAST IAST), automation patterns and CI integration for faster feedback, guidance on prioritizing by exploitability and code churn, and practical heuristics that turn noisy scanner output into actionable fixes instead of an impossible list.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:12Security testing challenges
- 6:10Static vs dynamic testing
- 10:30Static code analysis best practices
- 14:31Managing false positives
- 20:17Prioritizing vulnerabilities
- 24:20Structured triage process
- 27:58Automating analysis workflows
- 31:50Key takeaways and closing remarks
related talks
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
56mTune your Toolbox for Velocity and Value
33mBattle Tested Application Security
44mSecurity Practices Useful in Agile Development
22mSecurity for Developers
21mAdding DAST to CI/CD, Without Any Losing Friends- 43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
40mDevSecOps Guide to Bulletproof Your Development Workflow