[2019-Keynote] Security Learns to Sprint: DevSecOps by TanyaJanca

This talk will argue that DevOps could be the best thing to happen to application security since OWASP, if developers and operations teams are enabled to make security a part of their everyday work. With a ratio of 100/10/1 for Development, Operations, and Security, security now needs to concentrate on creating tools, processes and opportunities for dev and ops that result in more-secure products, instead of trying to do it all themselves like they did in days past. We must build security into each of “The Three Ways”; automating and/or improving efficiency of all security activities to ensure we don’t slow down developers, speeding up feedback loops for security related activities so that we fix the bugs faster and sooner, and providing continuous learning opportunities in relation to security, for both teams. Security can no longer be a gate or stumbling block, and ‘adding security in’ can no longer be used as a justification for project delays. If developers are sprinting, then we need to sprint too. So put on your running shoes; it’s time for DevSecOps!
------
AppSec Day Australia is an OWASP Foundation, Melbourne Chapter event held on 1st November 2019. This is a volunteer run event, and we couldn't have done it without the dedication, commitment, and sacrifice of all our volunteers; and we thank you.

For more info about AppSec Day, visit appsecday.io
To join the Melbourne Chapter's meetup, https://www.meetup.com/Applica....tion-Security-OWASP-
Follow us on Twitter @OWASPMelbourne

If you'd like to support what we're doing, please consider an OWASP membership, https://owasp.org/membership/ or/and volunteering.