Security at Scale

Presented at AppSec USA 2012, Oct. 26, 2012, 4 p.m. (45 minutes).

Application Security is a tough challenge in any organization, but working in open source projects has some distinct challenges. Working on AppSec in an open source project that has several hundred employees, thousands of contributors, and hundreds of millions of users has a whole other set of challenges. In this session I will cover off how the Mozilla Security Assurance team addresses application security for client applications, web applications and services, and introduce two tools that we have developed to help scale our security program.

Presenters:

• Yvan Boily Minion - Application Security Manager - Mozilla
  Yvan Boily is an Application Security Manager with Mozilla Corporation, and prior to that has a background in security with Finance and Government. Yvan Boily has previously launched an OWASP chapter in Winnipeg and currently leads the OWASP Vancouver chapter.

Links:

• https://appsecusa2012.sched.com/event/150mDtw/security-at-scale
• https://infocon.org/cons/OWASP/AppSecUSA 2012/Security at Scale.mp4

Similar Presentations:

• The Last HOPE (2008) / Introduction to the Open Web Application Security Project
• AppSec USA 2017 / Leveraging the ASVS in the Secure SDLC
• AppSec USA 2014 / Stop Chasing Vulnerabilities - Introducing *Continuous* Application Security