Leveraging Projects and Tools to Transform Your SDLC
summary
Claims rapid tour of 30+ OWASP projects and demos like Juice Shop CTF and Threat Dragon v2 while asserting practical utility of Sam (OWASP Flagship ~10 years) and the ASVS as requirement sources. Shows Dependency Track ingesting SBOMs, CodePulse mapping black‑box test coverage, and DefectDojo for vuln tracking; notes Security Rat is runnable but under‑maintained and Dependency Track uptake drops when vendors bundle SCA. Emphasizes cheat sheets (70+ short guides), open tools often work for pilots but free is not free for production.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 4:00OAS projects and tools
- 10:00SDLC transformation
- 13:16SAM model deep dive
- 18:19OAS Wayfinder and training
- 23:17OAS Top 10 projects
- 26:29Security Champions culture
- 28:38Web app firewalls rules
- 31:07Threat modeling tools
- 34:38Design security frameworks
- 36:46Implementation verification
- 42:47Closing advice
related talks
38mFree security resources that your competitors use!
30mSecuring DevOps using OWASP DevSecOps Tools
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
26mFlagship Projects: Security Knowledge Framework
46mSafely through the dependency minefield using OWASP Dependency Track
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
37mDeploying Security Testing Practice in Your Team and Company