Vulnerability and Threat Management - How Can We Close the Gaps

Explore a comprehensive conference talk on improving vulnerability and threat management processes through sound application development, configuration, and operations. Learn how DevOps and Visible Ops methodologies can enhance security and compliance. Discover expectations for tools and processes, covering topics such as stability security, vulnerability reporting, application patching, web server vulnerabilities, and application security checklists. Gain insights into addressing root causes and maintaining focus on critical security aspects in this 41-minute presentation from the Culture & Management Track at LASCON.

Syllabus

Introduction
Overview
Devops
Stability Security
Vulnerability Management
Documentation
Vulnerability Report
Opside
Devside
App patching
Web server vulnerabilities
Application acquisition vulnerabilities
Application security checklist
The root cause
Encore Movie
The Gorilla
One More Time
Keeping an Eye on the Ball