Semgrep eventsAppSec is full of acronyms and jargon: SAST, SCA, DAST, secrets scanning, shift left, etc etc. For anyone outside the field, it can be difficult to know where to start.
On top of that, AppSec has changed (and keeps changing) dramatically. Software ships much faster, open source dominates modern codebases (so supply chain incidents are a big risk), regulations are increasing, and AI-assisted development is producing more code than security teams (or developers) can realistically review.
This session is a plain-English introduction to AppSec for anyone who needs it!
We’ll cover:
What AppSec is and why it matters.
How an AppSec program works and its core building blocks.
SAST and code scanning, including why it’s foundational as well as where traditional tools fall short.
The future of AppSec and how AI is changing the role of security teams.
No security background required. You’ll leave understanding the language of AppSec and the problems that actually matter.