DeveloperWeek 2019

If you've determined that you need to do something about software security, how do you go about it? There are many frameworks and models that you could use (BSIMM, CSA CCM, ISO27017, etc.) but upon closer inspection, you might find these to be extremely long, overly complicated, and can be challenging to implement. Web apps have become more complex, cloud apps are increasingly API driven, and code is being deployed faster and faster. The attack surface has changed and traditional application security has evolved. Cybersecurity can seem intimidating, but it doesn't have to be. Practitioners need a straightforward runbook to guide their application security efforts. That’s why we created The Modern AppSec Framework. This talk will discuss why and how different organizations choose to invest in different software security controls and present straight forward approaches to application security.