Security teams are starting to get more involved in the development life cycle. What tools are going to be introduced to the SDLC? What strategy is the security team going to use? This talk will provide an introduction to the tools and strategies security teams are using to improve security in the SDLC. We will walk through dynamic and static analyzers. Their strengths and weaknesses. The Open Web Applications Security Project (OWASP). It’s vast resources for learning more about security. We will look at OWASP Pipeline. How it can help with automating security in a DevOps environment. Learn about the names providing excellent appsec content. This talk is for developers who want to know about security and the tools being integrated into the development life cycle.

Timothy De Block is a senior software security engineer based in Nashville, TN. In his current role he provides guidance to the development on all things security. He believes in building strong relationships and putting people in a position to succeed. As a presenter he believes in quality and providing practical actionable advice to his audience. He is a founding member of ColaSec and the local OWASP chapter in Columbia, SC. When he’s not playing The Division or Overwatch he’s producing the Exploring Information Security podcast. A weekly interview based podcast that touches on different infosec topics.

Back to BSides Detroit video list