VASCAN 2019

Vulnerable web applications are one of the primary contributors to compromises within an organization, as a compromised public web application can provide attackers with a foothold into the organization’s environment. From traditional web application vulnerabilities to the use of insecure libraries, it is getting more and more difficult to defend critical web applications against cyberattacks. Compounded with the shift to DevOps methodology and the use of Continuous Integration and Continuous Delivery models, the way application security is managed must adapt to the speed and agility of modern software development shops. This talk will focus on VCU’s vision and approach in designing and implementing an application security model over the past 3 years to help build security into application delivery pipelines.