Denim Group

denim group application security dan cornell software security security owasp information security john dickson appsec threadfix threadfix application security static analysis devops rsa mobile application security opensamm remediation software android vulnerability management dast sast xss ios risk software development dynamic analysis secure devops dynamic testing mobile application development mobile security mobile bsides security metrics iphone secure development waf ids java devsecops ci/cd open source funding static testing development teams open software assurance maturity model technology penetration testing manual analysis ham hybrid analysis mapping ids/ips sql sql injection cross-site scripting infosec security testing mobile apps austin metrics application portfolio sdlc vulnerability manager issa san antonio application supply chain synopsys coverity application vulnerability managment houseccon ciso cio rsa 2015 manual testing automated scanning sonarqube zap riverbed burp suite fud #rsac rsa conference cwe vulnerability taxonomy owasp top 10 wasc 24 mitre common weakness enumeration dread model enterprise web services mobile application threat model mobile app security risks application security risks mobile app cissp appsecusa owasp zap application vulnerabilities @denimgroup budget security training developer training logging security monitoring intrusion detection appseceu webinspect database security buzzword bingo penetration test web application security software compliance dublin secure mobile apps cross site scripting risk management smartphone software security remediation esapi web application firewall ips software assurance maturity model samm defect tracking sans compliance training enterprise agile findbugs net texas portfolio penetration vulnerability log4j nowsecure amass nmap asset management owasp san antonio ssa software security assurance digital transformation global apses dc global appsec dc 2019 rasp prevoty application vulnerability correlation denimgroup turning the tide strategy security strategy itunes app store root playstore google apple jailbroken lascon brocade dhs s&t sbir dhs development tools software testing hp protect software attack surface security benchmarking time to fix hp protect 2015 audit coverage bruce jenkins software assurance frameworks axway continuous security steve springett appsec usa pearson apps samsung money cornerstones of trust agnitio w3af tools framework internal security team blue team black box pen tester red team albert campa white box defender gray box ceos resources security program security dollars scare tactics mind tricks manager appsec manager crowdsourced crowdsourcing sun tzu security managers honey badger dalai lama hp webinspect veracode sharepoint application vulnerability management. application chief technology officer cto san francisco devops connect kris curylo ally bank ally financial ally dev teams attackers sof grc arachni webinar acunetix cenzic hp application security program checkmarx iast .net pci compliance ciao cso @johnbdickson business case pet project fiver bill pay wasp consultant amazon attacker tax site paypal cookies account entrapment ben broussard survey app sec denver eclipse bugzilla governance requirements security teams it audit open web application security project ci continuous integration systems jenkins application attack surface data software defects risk-ranked application portfolio @danielcornell it security defects system builders los alamos threat modeling budgeting budget justification statistics code review jsp spring implementation patterns dan cornel design patterns ipad pmi project management josh sokol symbiotic security database relational database sqli sql security lessons learned software code vulnerability analysis 2012 research rsa 2012 cbt e-learning cloud security standards standards cloud security pci virtual patching denimg group software reform ireland eu source boston software remediation roi source conference 2011 app design designing apps smartphonesdumbapps smartphonesdumbappscom content smartphones mobile applicaton mitigation mobile browsers risk-ranking security remediation smart phone application security remediation enterprise security api maturity model agile development appsecdc source code review organizatoinal behavior process improvement jeremiah grossman waterfall whitehat security network security cybercommand cybersecurity pmd cobol foxpro greg genung portfolio management power builder twitter social media linkedin facebook myspace policy test threat modeling assessment review code development management