Drive security decisions with Data Classification

On-board AppSec as if they were Development

Let's review some code (for security)

Secure SDLC

Who is Threat Modeling?

From Pentester to AppSec Engineer

Building Security Requirements from Architecture Documentation

Web Vulnerability Scanning and Assessments

Getting into Application Security

Can't see the Security Forest for the trees: Code or die.

Building an Application Security Program