Large-Scale Application Attack Surface Management

This presentation examines ways to analyze and manage attack surfaces across large portfolios of web and mobile applications. It discusses static code analysis, runtime instrumentation, developer testability, and an example architecture for scaling an attack surface management program.