Introducing Security Earlier into the SDLC: How to ‘hack your own apps’

No ratings

Presented at BsidesOttawa 2016 by

Tanya Janca

Fixing bugs earlier in the software development life cycle is always faster and less expensive than further down the road, and this is also true with security flaws. This talk will introduce software developers to the idea of “hacking their own code” and fixing many common security issues before their code is sent to QA. The talk with include a demo of an SQL Injection, how to use OWASP Zed Attack Proxy (AKA ZAP) to scan their code, a walk through of a sample report and an explanation of the risks of a few common security bugs. The goal of this talk is to give developers hands-on skills that they can bring to work, enabling them to write the best code possible.