Name: Real-World Retrospective: AppSec First Steps
Start: 2019-11-20T19:00:00Z
End: 2019-11-20T19:00:38.000Z
Location: BrightTALK
Rating: 5

Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Prompted by powerful AI trained by trillions of lines of code, Veracode customers fix flaws faster with high accuracy. Trusted by security teams, developers, and business leaders from thousands of the world’s leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means. 

Learn more at www.veracode.com

En nuestras constantes conversaciones con clientes y socios de negocios encontramos como factores regulares de complejidad para DAST, la dificultad en la asignación de tiempo y recursos para la ejecución periódica de tales análisis, el ruido constante generado por las configuraciones necesarias y la demora para solucionar los problemas de seguridad debido al momento tardío (dentro del SDLC) en el que normalmente se ejecuta.

Veracode DAST Essentials entrega una forma más fácil y ágil de:
- Escanear sus aplicaciones web y APIs
- Lanzar análisis rápidos bajo demanda en una etapa más temprana del ciclo de desarrollo de software
- Integrar con facilidad en su stack de desarrollo actual
- Impulsar el escaneo con más modularidad, personalización y resiliencia

Veracode DAST Essentials. Asegurando WebApps & APIs

Balancing speedy development with security is challenging. Join us for a webinar to see how you can launch dynamic scans with a few clicks to rapidly find and fix runtime vulnerabilities, helping you secure your web applications and APIs faster than before.

Veracode DAST Essentials helps developers and security teams make dynamic testing part of their software release process more quickly and easily. Teams can seamlessly integrate agile security testing into their pipelines that works and scales within their DevOps speed and release frequency.

Why Veracode DAST Essentials: In 2022, 40% of breaches were attributed to web applications.* Discover how Veracode enables you keep pace with evolving threats at the speed and scale of modern development processes.
Find & Fix Runtime Vulnerabilities Faster: Explore how DAST Essentials helps you balance speedy development with security enabling you to secure web assets within your DevOps speed and release frequency.
Getting Started with DAST Essentials in Minutes: Learn the step-by-step process, from creating scan targets to interpreting results and remediating runtime vulnerabilities – all with a few clicks.

Securing Your Web Assets at Speed with Veracode DAST Essentials

Les failles de sécurité sont créées plus rapidement qu’elles ne sont corrigées. Il y a une explication très simple à cela : de plus en plus, les applications sont créées au travers de processus automatisés alors que les corrections des failles de sécurité sont toujours faites manuellement.
Veracode change cela aujourd’hui!
Rejoignez-nous pour une présentation de Veracode Fix – la nouvelle solution de remédiation intelligente qui automatise la correction des codes non sécurisés - découvrez comment tirer parti de l’intelligence artificielle spécialisée pour gérer les risques applicatifs à grande échelle et fournir des applications plus sûres, plus rapidement, avec moins d’efforts et de coûts.

Veracode Fix: Le futur de l’Intelligent Software Security

Las vulnerabilidades de seguridad se crean más rápido de lo que se solucionan. Hay una explicación muy simple para esto: cada vez más, las aplicaciones se crean a través de procesos automatizados, mientras que las correcciones de dichas vulnerabilidades aún se realizan manualmente. ¡Veracode está cambiando esto! 
En esta sesión presentamos Veracode Fix, la nueva solución de remediación inteligente que automatiza la remediación de código inseguro. Aprenda cómo aprovechar la inteligencia artificial especializada para administrar los riesgos de las aplicaciones a escala y entregar aplicaciones más seguras, más rápidas, con menos esfuerzo y coste.

Veracode Fix: el futuro de la seguridad de Software Inteligente

In today's fast-paced digital landscape, ensuring the security of your applications is more critical than ever. That's why we've partnered with Delaware and Veracode to bring you a game-changing webinar that will show you how to harness the power of Artificial Intelligence (AI) and Leading Language Models (LLM) to supercharge your application security.

In this webinar, you will learn about:
Unlock the Power of AI in Application Security

Accelerate Threat Detection: Learn how AI can swiftly identify vulnerabilities and threats within your applications, allowing you to stay one step ahead of cybercriminals.

Collaborate Seamlessly: Discover how AI/LLM can bridge the gap between development and security teams, creating a synergy that accelerates security issue resolution without sacrificing control.

Leveraging AI to Accelerate Application Security

Software-Sicherheitslücken entstehen schneller als sie behoben werden. Dafür gibt es eine einfache Erklärung: Wir erstellen Software mit Automatisierung. Wir beheben das Problem durch manuelle Korrekturen. 
Veracode verändert das. 
Nehmen Sie Teil für einen Einblick in Veracode Fix – die neue intelligente Lösung zur Behebung von Schwachstellen, die Korrekturen für unsicheren Code automatisiert – und erfahren Sie, wie Sie spezielle KI nutzen können, um Softwarerisiken in großem Maßstab zu verwalten und sicherere Software schneller bereitzustellen, bei weniger Aufwand und geringeren Kosten.

Veracode Fix: Die Zukunft intelligenter Software Security

Las vulnerabilidades de seguridad se crean más rápido de lo que se solucionan. Hay una explicación muy simple para esto: cada vez más, las aplicaciones se crean a través de procesos automatizados, mientras que las correcciones de dichas vulnerabilidades aún se realizan manualmente. 
¡Veracode está cambiando esto! 
En este webinar presentaremos Veracode Fix, la nueva solución de remediación inteligente que automatiza la remediación de código inseguro. Descubra cómo aprovechar la inteligencia artificial especializada para administrar los riesgos de las aplicaciones a escala y entregar aplicaciones más seguras, más rápidas, con menos esfuerzo y coste.

Veracode Fix: El futuro de la Seguridad de Software Inteligente

Join us for a concise yet comprehensive webinar on Software Supply Chain Security. In an era of escalating cyber threats, safeguarding your software supply chain is paramount. This webinar will provide essential insights into identifying vulnerabilities, implementing robust security practices, and ensuring the integrity of your software ecosystem. 

In this webinar, you will learn about:


Securing the open-source components underpinning most modern software development

Ensuring that the software build process is hardened against compromise.

How you can provide assurance to your customers that your software is secure. 

How Veracode solutions and services help you create a more secure supply chain.

Securing Your Software Supply Chain for Ultimate Application Security

Veracode’s latest software security research shows that 32% of applications contain security flaws at the first scan, and this jumps to 70% by the five-year mark. We dug into 17 years of data and analyzed three-quarters of a million applications to answer a crucial question: What can be done to avoid introducing security flaws in the first place? Watch this short video to learn data-backed steps you can take to reduce flaw introduction, remediate flaws faster and lower security debt.

VeraTalk: Fast 15 on 2023's State of Software Security

Maturing DevSecOps with data-driven security education
If you want to produce secure software, you need a modern software development workflow built around security from the get-go.  

Join our DevSecOps experts for a webinar where you’ll learn how to: 

Establish a continuous feedback loop to monitor compliance and security issues   

Leverage reporting to draw insights and identify areas that require security education  

Build a training curriculum into sprint planning  

Provide developers with contextual – and intelligent – remediation tools

Maturing DevSecOps with Data-Driven Security Education

Moving your workloads to the cloud lets your development team innovate faster, but improper planning leads to a more vulnerable SDLC. How can you reap the benefits of the cloud while avoiding costly vulnerabilities that can hold you back? In this fireside chat you will gain critical insights from our experts on how to migrate your workloads to the cloud safely and securely.

The Roadmap To a More Secure and Modernized SDLC

How do you build trust in AI?

For all the speculation about what AI might do and debate over what it should do, examples of responsible AI in practice are few and far between. Check out this interview with Veracode’s Brian Roche and learn about Veracode Fix as an example of responsible AI that saves developers time AND improve security outcomes without compromising data, violating open-source licenses, or reproducing code insecurities.

Generative AI's Role in Secure Software Development

Developers spend too much time manually fixing security issues and often create new flaws faster than they can fix old ones.  Veracode Fix changes this.  Watch this video to see how Veracode Fix empowers you to save time and secure more by generating security patches developers can review and implement without manually writing a single line of code. So, you can address security flaws that would otherwise persist for months in minutes, at scale, with less effort and cost.

Accelerate Secure Software Development with Veracode Fix

APIs, containers, and clouds, oh my! Organizations use modern software development to deliver incredible user experiences and better performance. Just don’t look behind the curtain; behind that curtain, ingress points and opportunities for attackers are proliferating. That’s why securing cloud-native applications needs to mature beyond run-time protection.

In this webinar, you’ll learn the steps for integrating security into your entire SDLC to pay down your security debt and prevent future risks. Join Veracode’s Scott Simpson and Optiv’s Jim Canup to hear real-world experiences, best practices, and insights into how customers can apply these principles and deliver positive results at scale.

How To Mature Cloud-native Application Security Programs

Software security flaws are created faster than they are fixed. There is a simple explanation for this: We create software with automation. We fix it with manual remediation.  
 
Veracode is changing this.  
 
Tune in for an inside look at Veracode Fix – the new intelligent remediation solution that automates fixes for insecure code – and learn how you can leverage specialized AI to manage software risk at scale and deliver more secure software, faster, for less effort and cost. 
 
Watch Now!

Manage Software Risk at Scale with Suggested Fixes for Insecure Code

Las vulnerabilidades de seguridad se crean más rápido de lo que se solucionan. Hay una explicación muy simple para esto: cada vez más, las aplicaciones se crean a través de procesos automatizados, mientras que las correcciones de dichas vulnerabilidades aún se realizan manualmente. ¡Veracode está cambiando esto! 
En este webinar presentamos Veracode Fix, la nueva solución de remediación inteligente que automatiza la remediación de código inseguro. Aprenda cómo aprovechar la inteligencia artificial especializada para administrar los riesgos de las aplicaciones a escala y entregar aplicaciones más seguras, más rápidas, con menos esfuerzo y coste.

Veracode Fix: el futuro de la seguridad de software inteligente

Metrics — or perhaps more accurately, the right metrics — are crucial for understanding what’s really happening in your AppSec program. They serve a dual purpose: They demonstrate where your organization is at but also show what progress it’s making in achieving its objectives.

Join this session to get our advice on what to measure in your AppSec program, and how to measure it. We’ll cover measuring your compliance against your own internal AppSec policy, your scan activity, flaw prevalence, and time to resolve.

Key takeaways:
- Understand the role metrics play in your AppSec success
- Learn which metrics to report to executives
- Find out which metrics give you the best picture of the health of your AppSec program

Analytics Best Practices

We consistently come across organizations that think they can check the AppSec box if they’re scanning their code, or who are quantifying success by how many scans they can run a day, rather than by how many flaws they were able to fix. Unfortunately, you can’t scan your way to secure code.

At this session will walk you through three critical steps an organization must take beyond scanning to develop more secure code: educating your developers so they learn secure coding skills, fixing the vulnerable code that’s found, and scaling the AppSec program to cover your entire application landscape.

Key takeaways:
- Learn how to move your AppSec program from a find focus to a fix focus
- Find out why training plays a critical role in AppSec
- Understand what it takes to scale your AppSec program

Keynote: Beyond Scanning

Development teams’ biggest fear when they hear their organization will enact an application security assessment program is that their development efforts will be slowed down. This team can be the biggest barrier to the success of the program because if they don’t follow the protocol set forth by the program plan, the security team will be unable to demonstrate the value of the plan.

Join this session to get our tips on getting developer buy-in for your AppSec program, including implementing the right tools, establishing training on secure coding, and developing a security champions program.

Key takeaways:
- Find out what you need to know about your development teams’ processes and priorities in order to get AppSec buy-in
- Understand why the right AppSec tools and training are key to developer buy-in
- Get tips on developing a security champions program

Getting AppSec Developer Buy In

A mature application security program might seem intimidating to some organizations. But it’s important to remember that there are an established series of steps most organizations take when developing an application security program. The keys are to start small, have clear goals, keep things simple, prove the value, and then mature the program over time. 

We’ve worked with numerous companies on their path from zero AppSec to a mature, comprehensive program. To shed light on how to get started with application security, and on what good looks like, this session will outline the first steps most of our customers take to develop a mature application security program.

Key takeaways:
- Get best practices on setting goals for your AppSec program
- Find out the best place to start when kicking off your AppSec program
- What does good look like in AppSec? Learn what to strive for

From Zero to Maturity: Setting AppSec Goals & First Steps

How can you demonstrate the value of adopting or expanding your organization’s AppSec program when there’s a growing need for all types of cybersecurity, as well as intense competition for your critical tech budget? Simply put, you must convince decision-makers that your program — and their money — will lead to better business outcomes, a higher level of efficiency, lower costs, and improved return on investment (ROI).

Attend this session to get tips and best practices on making the case for AppSec to your senior leadership team.

Key takeaways:
- Learn how to make the case for AppSec in a way that resonates with executives
- Understand which AppSec metrics executives will care about
- Find out how to tie AppSec to corporate goals and priorities

Webcam Keynote: Getting AppSec Executive Buy In

All Aboard the Veracode Express! | Customer Summit 2019

With AppSec, as with most initiatives, the first step is often the most difficult. Learn from someone who’s been there. Join our conversation with Joe Leonard a Cyber Security leader and more as they explain their recounts on how organizations have kick off their AppSec program. You’ll get best practices and lessons learned on the initial AppSec steps to take to set your organization up for success.

Key takeaways:
- Hear how real companies kicked off and expanded their AppSec programs
- Get AppSec best practices you can take back to your own company
- Get practical advice on AppSec pitfalls to avoid

Real-World Retrospective: AppSec First Steps

Application Security

AppDev

SecOps

Cyber Security

CISO

Application Development

DevOps

Vulnerabilities

Security Strategy

Security Culture

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Real-World Retrospective: AppSec First Steps

Presented by

About this talk

Veracode