OWASP Dallas March Meeting

Title:

DevSecOps Unplugged

Description:

There is a confluence of forces that disrupt the ability for organizations to implement DevSecOps effectively. We continue to increase our dependence on software but teams are still relatively immature in developing securely. Our systems continue to grow exponentially complex. With IoT starting to take off, there is no clear industry vision for security these devices. Cybersecurity threats continue to rise. Even the most diligent teams find themselves subtly gaining technical debt because they are unable to do the job right.

This impact is felt across industries: telecommunications, financial, software development, transportation, and medical just to name a few. So what is our response as security professionals? We have software tools and databases like OWASP Top 10, CWE/CVE, SANS Top 25 and so on. But what we need is a set of patterns and anti-patterns on implementing DevSecOps.

Our talk will highlight what we’ve observed in conducting research from Tier 1 peer reviewed articles from 2016 to the present. We will present what seems to be emerging as a set of best practices as well as anti-patterns in DevSecOps.

Bio:

Vishal Asthana, CISSP has been with Security Compass for over 4 years, as a Regional Director for the company’s India Operations untill mid-2017, and now our Director of Customer Solutions. He designed and co-presented SecureMe Droid app at OWASP’s flagship AppSec USA (2015). He was also OWASP Delhi Chapter’s lead for nearly 2 years. He continues to represent Security Compass in SAFECode as a member of the Technical Leadership Team. Prior to joining Security Compass, he was a part of Symantec’s central product security team as a Senior Principal Security Engineer. He possesses over 15 years of work experience in various Information Security domains, of which the past 10 years have been in Application Security.

Sponsorship:

The meeting food & drinks will be sponsored by Akamai.

IMPORTANT Meeting Notes:

The Akamai office is a gun-free zone. Please do not attempt to bring in any guns, holsters, ammo, etc. into their office space.