How a Scientific Approach Can Save Security Testing - David Hunt - ESW #301

<p>If you’ve ever worked on a red or purple team, you know scaling engagements to production is an intensive, unwieldy process. Technology pitfalls may exist, but the fundamental problem is this: the process of writing, testing, deploying, and verifying the efficacy of TTPs is highly flawed and inconsistent. This conversation will focus on applying a scientific process to security testing in order to achieve production scale.</p> <p>Segment Resources:</p> <p>Prelude Build GitHub: <a href= "https://github.com/preludeorg/build">https://github.com/preludeorg/build</a></p> <p>Prelude Docs: <a href= "https://docs.prelude.org/docs">https://docs.prelude.org/docs</a></p> <p>Introducing Prelude Build: An Open Source IDE Purpose Built for Security Engineers: <a href= "https://www.preludesecurity.com/blog/introducing-prelude-build-an-ide-purpose-built-for-security-engineers"> https://www.preludesecurity.com/blog/introducing-prelude-build-an-ide-purpose-built-for-security-engineers</a></p> <p>A Practical Guide for Scaling Continuous Security Testing: <a href= "https://www.preludesecurity.com/blog/scaled-security-testing-a-practical-guide"> https://www.preludesecurity.com/blog/scaled-security-testing-a-practical-guide</a></p> <p>Prelude Build: <a href= "https://www.preludesecurity.com/products/build">https://www.preludesecurity.com/products/build</a></p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/esw">https://www.securityweekly.com/esw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/esw301">https://securityweekly.com/esw301</a></p>