Storytelling Techniques for Application Security - Beyond Penetration Testing

Explore application security beyond penetration testing in this 44-minute conference talk from AppSecEU 2016 in Rome. Delve into interview-based research methodologies, qualitative approaches, and the importance of openness in security consultancy. Gain insights on application security maturity, the role of security champions, and how quality-minded teams can enhance application security. Learn practical applications for security and discover new perspectives on improving organizational security posture.

Intro
About Timur
Agenda
Preliminary thoughts
Interviewbased research
Qualitative research
Show your own openness
Why to use interviews
Interviewbased consultancy
Application security maturity
Application security champions
Quality minded teams
Applications for security