Rising Flaws, and Slow to Fix: What’s at Stake for Software Security?
The majority of applications contain at least one…
February 9, 202124m 30s
Audio is streamed directly from the publisher (feeds.soundcloud.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
The majority of applications contain at least one security flaw and fixing those flaws typically takes months. Automating scanning and scanning via API can help development teams fix faster by a pretty wide margin. Veracode’s Chris Eng and Cyentia’s Jay Jacobs explore what’s driving the volume of code flaws, what factors influence fix rates, how organizations with higher fix rates are tackling the problem successfully, and automation as a best practice for DevSecOps and an action developers can take to "nurture" their apps to better security.
Presenters:
Chris Eng, Chief Research Officer, Veracode
Jay Jacobs, Co-Founder and Chief Data Scientist, Cyentia Institute
Kacy Zurkus, Content Strategist, RSA Conference