Software security maturity is often diluted down to the OWASP Top 10, leaving organizations with a simplistic & ineffective view of risks represented by their real-world attack surface. Where do these organizations then go, to realize a strategy that considers the complexity of their production stacks, including frameworks, platforms, languages, & libraries. This talk will focus on leveraging the Software Assurance Maturity Model (SAMM) to benchmark coverage & consistency of application security across the software development lifecycle. If your organization has been considering formalizing your application security program, or just don,t know where to start, come to this talk to find out the pitfalls and opportunities of using SAMM to guide a successful and ever-maturing application security program.

Back to GrrCON 2017 video list