#1674277: Avoiding Appsec’s Worst Practices – ASW #324

Description: 1. Avoiding Appsec’s Worst Practices – ASW #324
We take advantage of April Fools to look at some of appsec's myths, mistakes, and behaviors that lead to bad practices. It's easy to get trapped in a status quo of chasing CVEs or discussing which direction to shift security. But scrutinizing decimal points in CVSS scores or rearranging tools misses the opportunity for more strategic thinking. We satirize some worst practices in order to have a more serious discussion about a future where more software is based on secure designs.

Segment resources:

https://bsidessf2025.sched.com/event/1x8ST/secure-designs-ux-dragons-vuln-dungeons-application-security-weekly
https://bsidessf2025.sched.com/event/1x8TU/preparing-for-dragons-dont-sharpen-swords-set-traps-gather-supplies
https://www.rfc-editor.org/rfc/rfc3514.html
https://www.rfc-editor.org/rfc/rfc1149.html
More info: https://www.scworld.com/podcast-episode/3432-avoiding-appsecs-worst-practices-asw-324?nbd=%7B%7Blead.HumId%7D%7D&nbd_source=mrkto&utm_source=sc-dailyscan&utm_medium=email

Date added April 2, 2025, 2:07 p.m.
Source scworld
Subjects
  • PodCasts / Webcast / Webinar / eSummit / Virtual Event etc.