From the course: Building an Application Security Program

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Understanding AppSec testing

Understanding AppSec testing

From the course: Building an Application Security Program

Start my 1-month free trial Buy for my team

Understanding AppSec testing

“

- [Instructor] Now that we've talked about the basics of the development lifecycle and an understanding of business and application security, let's get into testing and how we can build a testing framework and an application security program. Over the years, it's become obvious that security needs to be embedded into the SDLC. What was once a struggle is now something that most organizations understand needs to happen. Having security embedded into the SDLC helps teams discover security issues inside of applications before they escalate into real attacks and production. This quote from HackerOne says, "Security testing is an important step in the SDLC, which can help teams discover security issues and applications before they escalate into damaging attacks and breaches." So let's talk more about application security and talk about some basic principles of how we can build this into the SDLC. When building an application…

Contents