Scaling Your Application Security Program - Clint Gibler - ASW #156

<p>In this segment with Clint Gibler, learn:</p> <p>* Why secure defaults are higher ROI than finding vulnerabilities</p> <p>* How modern AppSec teams are working with their engineering counterparts</p> <p>* Targeting vulnerability classes, avoiding bug whack-a-mole</p> <p>* The latest innovations in lightweight static analysis</p> <p>Segment Resources:</p> <p><a href="https://semgrep.dev/">https://semgrep.dev/</a></p> <p><a href= "https://github.com/returntocorp/semgrep">https://github.com/returntocorp/semgrep</a></p> <p><a href= "https://github.com/returntocorp/semgrep-rules">https://github.com/returntocorp/semgrep-rules</a></p> <p>2020 GlobalAppSec SF <a href= "https://docs.google.com/presentation/d/14PjOViz2dE6iToOyoFk_BQ_RUfkEHGX-celIiybDQZA/edit"> https://docs.google.com/presentation/d/14PjOViz2dE6iToOyoFk_BQ_RUfkEHGX-celIiybDQZA/edit</a></p> <p><a href="https://tldrsec.com/">https://tldrsec.com/</a></p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/asw156">https://securityweekly.com/asw156</a></p>