Another fantastic keynote at #OWASP global appsec conference this morning by @SheHacksPurple
I, and half the conference attendees, want to be Tanya when we grow up.
I, and half the conference attendees, want to be Tanya when we grow up.
I, and half the conference attendees, want to be Tanya when we grow up.@dyn @nilokuma The video will be up in a few weeks. For now, you can view a summary here:
Https://newsletter.shehackspurple.ca/shifting-security-everywhere
(You need to join my personal newsletter though).
As AppSec pro, you may feel that marketing has ruined the meaning of ‘shift left’. It was supposed to mean ‘starting security as early as possible in the SDLC’, but was transformed into “buy our product, put it in your CI/CD, then your apps will be secure”. But we can't just throw a bunch of tools into a CI/CD and call it a day. With this in mind, let’s focus on comprehensive programs, developer buy-in, and making security work for the entire business, by shifting security everywhere. Written by Tanya Janca and We Hack Purple.