A talk on application risk profiling on an enterprise scale (an OWASP SAMM activity – https://owaspsamm.org/model/design/threat-assessment/stream-a/). I will discuss digital transformation in the enterprise, how it impacts cloud native applications developed using agile methodologies and as a result, an oscillating application risk rating, which then triggers prioritized security-related activities by application security engineers.
Key topics will include:
Browse SnykCon 2021 talks
- Creating a baseline application risk profile
- Dynamic characteristics of application risk factors
- Significant changes that trigger security reviews
Global Director of Application Security, AbInbev