DevOps and Beyond

VT12 How to Implement Developer-optimized Application Security


1:30pm - 2:45pm

Level: Intermediate

Josh Johanning

Senior DevOps Architect


As applications become the interface for all businesses, they've become alluring targets for attackers. Today it's clear that shipping fast and resilient code are two of the main success criteria for development teams. However, in many teams, their approach to application security hasn't evolved alongside the pace of development. Traditional implementations slow down development and cause developers and product security teams frustration. This session will highlight where old approaches break down and share a developer-optimized approach that can help overcome these challenges.

You will learn:

  • How to design and implement a developer-optimized application security program
  • How to get started with Github Advanced Security (i.e., how to enable it, run your own tests, and review results)
  • Remediation best practices