Colorful AppSec - Red, Blue, or Purple?
summary
Red teams run realistic attack exercises that go beyond bug bounties to probe APIs, mobile apps, infrastructure and business logic, uncovering risks that lack CVSS scores; blue teams pair orchestration, threat‑sharing and simple weekly metrics (a “road to success” video workflow) to shift from reactive defense toward creative detection; purple teams fuse empathy, advocacy and security champions to close gaps; start red exercises early and run them regularly — post‑session polling shows 95–99% hands up when everyone claims security ownership.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:45Pedro Belino
- 6:02Red Team Exercise
- 7:03Luis Luis Gomes
- 16:45Three Is People Process and Tools
- 24:03Blue Teams
- 25:03Challenges for the Red Team
- 35:37How Do I Know that My Organization Is Ready for a Red Teamer
related talks
41mPurple Is the New Red - Providing the Most Value from Offensive Security
43mShades of Purple: Getting Started and Making Purple Teaming Possible
34mPurple Team Strategies for Application Security
45mThis is application purple teaming
49mTraining for Incident Response: The Red, the Blue, and the Ugly
29mRed Team, Blue Team Or White Cell? Trends In IT
53mIncreasing Security ROI with Adversary Simulation and Purple Teaming
52mBuilding the Always-On Purple Team