How to Gain Value from SAST Tools in SDLC - Most Common Findings and Mitigations

Explore the integration of Static Application Security Testing (SAST) tools in the Software Development Life Cycle (SDLC) to enhance code security. Learn about the most common security findings and their mitigations in this 34-minute conference talk from Devoxx. Discover how SAST tools add value to the development process, providing visibility into a system's security posture and helping teams set specific goals. Gain insights from real-world experiences across various sectors, including finance, banking, and telecommunications. Understand how to filter out false positives, prioritize critical issues, and implement appropriate solutions. Get practical examples of mitigations for common security findings and learn how to effectively integrate SAST tools into daily development workflows to produce more secure software.

How to gain value from SAST tools in SDLC: Most common findings and mitigations by Stella Varvarigou