ForAllSecure

SEPTEMBER 29, 2021

Fagbemi of Resilient Software Security, and Jeff Costlow of Extrahop Networks to discuss the ins and outs of a successful security testing program. Direct and immediate feedback within the SDLC was the key capability of fuzzing that got Larry over his resistance of inserting DAST in the SDLC. The reason?

SDLC 52

SDLC Study Programming Development 52

ForAllSecure

SEPTEMBER 15, 2021

Shoenfield calls on a 2011 study that showed 85% of static analysis findings were false positives. The keynote presentation is concluded with a Q&A session where he shares his tips and tricks for getting developers excited about security as well as justifying the need for a fuzz testing program.

Applications 52

Applications Security SDLC Analysis 52

ForAllSecure

JULY 27, 2021

A benchmarking study by the NSA Center for Assured Software found that the average SAST tool covers only 8 out of 13 weakness classes and finds only 22 percent of flaws in each weakness class. Fuzz testing is a heavy-weight yet versatile DAST solution that is able to conduct multiple types of testing across the SDLC.

Security 52

Security Applications Development SDLC 52