BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2cc8-7317-83c5-d9a9d1d07ba0@www.devopschat.co
DTSTAMP:20261106T132826Z
DTSTART:20210607T160000Z
DTEND:20210607T170000Z
SUMMARY:DevSecOps: Why Aren’t IAST and RASP in Your Stack?
DESCRIPTION:So last month Sharon Goldberg showed a big latent demand for mo
 re DevSecOps content. I am lucky to work with one of the OWASP founders\, 
 Jeff Williams and he agreed to do a talk on IAST and RASP technologies.\n\
 n(zoom link come the day of)\n\nHere is what he cooked up:\n\n# DevSecOps:
  Why Aren’t IAST and RASP in Your Stack?\n\n## Abstract\n\nSoftware is i
 ncredibly hard to secure because it's a black box. We've spent decades try
 ing to verify properties of software by analyzing the source code\, scanni
 ng\, fuzzing\, pentesting\, etc... But the lack of context always leads to
  false positives\, manual effort\, long feedback loops\, large security ba
 cklogs\, and MTTR measured in months not days. In this talk\, Jeff will de
 monstrate the power of "security observability" by using instrumentation (
 similar to a performance tool) to expose critical security vulnerabilities
  and attacks from inside an application while it's running. First\, Jeff w
 ill introduce Interactive Application Security Testing (IAST) and show you
  how *anyone* can quickly and accurately find complex vulnerabilities with
 out scanning. Jeff will also show you how you can use Runtime Application 
 Self-Protection (RASP) to prevent your application from being exploited in
  production. Finally\, Jeff will provide practical advice on how you can u
 se IAST and RASP to achieve DevSecOps and build bridges between developmen
 t and security.\n\n## Bio\n\nHe recently authored the DZone DevSecOps\, IA
 ST\, and RASP refcards and speaks frequently at conferences including Java
 One (Java Rockstar)\, BlackHat\, QCon\, RSA\, OWASP\, Velocity\, and Pivot
 alOne. Jeff is also a founder and major contributor to OWASP\, where he se
 rved as Global Chairman for 9 years\, and created the OWASP Top 10\, OWASP
  Enterprise Security API\, OWASP Application Security Verification Standar
 d\, XSS Prevention Cheat Sheet\, and many more popular open source project
 s. Jeff has a BA from Virginia\, an MA from George Mason\, and a JD from G
 eorgetown.\n\nhttps://www.devopschat.co/meetings/devsecops-why-arent-iast-
 and-rasp-in-your-stack
URL:https://www.devopschat.co/meetings/devsecops-why-arent-iast-and-rasp-in
 -your-stack
END:VEVENT
END:VCALENDAR