Transforming AppSec: Protecting 'Everything as Code'
Modernizing application security programs to protect infrastructure-as-code, secrets, and emerging cloud and AI technology stacks.
Summary
The Evolution of Application Security
Rapid adoption of cloud computing, microservices, mobile platforms, and generative AI has expanded the traditional scope of AppSec. Security practices have shifted from point-in-time SAST and DAST scans toward continuous, proactive defense across the entire software development lifecycle.
Securing Everything as Code
As infrastructure, pipelines, and configurations are codified into software repositories, securing Infrastructure as Code (IaC) and enforcing automated secret management become essential to preventing widespread cloud compromise.
Building a Holistic AppSec Posture
Modern AppSec teams must integrate real-time anomaly detection, rigorous configuration validation, and developer-first security tooling to manage risk across complex hybrid environments.
Related talks
App Sec Village·50 min
David Waldrop
Surveys essential tools and automated practices for embedding security verification into DevOps and Agile pipelines.
OWASP Foundation·41 min
Presenters detail vulnerability discovery and exploitation in APPSEC Cali 2018 - Architecting for Security in the Cloud.
OWASP Foundation·40 min
Engineers explore architecture and security mechanisms for APPSEC Cali 2018 - Leveraging Cloud SDNs to Solve OWASP Top Ten.