Loading…
Thursday, October 5 • 9:00am - 9:45am
Orange Is The New Purple - How and why to integrate Development Teams with Red/Blue Teams to build more secure software

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.

Introducing a new paradigm for integrating developers with offensive and defensive teams to enhance SDLC.  Utilizing Red, Blue, and now Yellow (Development) Teams in a structured way to provide knowledge sharing, strengthening of defenses, coverage, and response, and ultimately the development of a high level of security maturity over time.  This new concept of "Red + Yellow == Orange && Blue + Yellow == Green" focuses on the role of Developers as a critical piece of security assurance activities when combined with Offensive and Defensive Teams.  Orange Teams add value when they have been integrated into SDLC by creating a cycle of perpetual offensive testing and threat modeling to make software more secure over time through a high level of dedicated interaction.  Green teams add value when they help ensure software is capable of providing good DFIR information.  This talk will evaluate how different Team combinations can lead to more secure software.


Speakers
AC

April C. Wright

April C. Wright is a Senior Security and Compliance Manager for Verizon Wireline, building SDLC program maturity, implementing eGRC, spearheading Threat Intelligence, and performing risk reduction with a vengeance via leadership of comprehensive security programs for massive global... Read More →


Thursday October 5, 2017 9:00am - 9:45am CDT
Room 1