Security Automation in your Continuous Integration Pipeline

Presented at DerbyCon 6.0 Recharge (2016), Sept. 24, 2016, 5 p.m. (25 minutes).

Developers use unit tests and acceptances tests in continuous integration (CI) to find bugs early and often in a repeatable way. Security is an important part of any software development life cycle. So why not add security analysis tools to this pipeline? This talk will cover adding and using OWASP/ pipeline, a framework made for running security analysis tools in CI.

Presenters:

• Jimmy Byrd

Similar Presentations:

• ToorCon San Diego 20 (2018) / Integrated security testing: Turn your QAs into hackers by leveraging your existing test framework
• DeepSec 2015 „DeepSec No. 9“ / Continuous Intrusion: Why CI Tools Are an Attacker's Best Friends.
• Black Hat Europe 2015 / Continuous Intrusion: Why CI tools are an Attackers Best Friends