AppSec: Beyond Scanning

Logo
Presented by

Chris Eng, Chief Research Officer, Veracode

About this talk

We consistently come across organizations that think they can check the AppSec box if they’re scanning their code, or who are quantifying success by how many scans they can run a day, rather than by how many flaws they were able to fix. Unfortunately, you can’t scan your way to secure code. At this session will walk you through three critical steps an organization must take beyond scanning to develop more secure code: educating your developers so they learn secure coding skills, fixing the vulnerable code that’s found, and scaling the AppSec program to cover your entire application landscape. Key takeaways: - Learn how to move your AppSec program from a find focus to a fix focus - Find out why training plays a critical role in AppSec - Understand what it takes to scale your AppSec program
Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (396)
Subscribers (31055)
Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Prompted by powerful AI trained by trillions of lines of code, Veracode customers fix flaws faster with high accuracy. Trusted by security teams, developers, and business leaders from thousands of the world’s leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means. Learn more at www.veracode.com