Security Innovation's Joe Basirico a Featured Speaker at Houston Security Conference | Security Innovation
Wilmington, MA – April 4, 2018 – Security Innovation, a pioneer in software security assessment and training, today announced that on Wednesday, April 4 at 2:00 p.m. CDT, Joe Basirico, the company’s VP of Services will be a featured speaker at HOU.SEC.CON 2018, Houston’s most popular information security conference. His guidance will help organizations understand what it takes to implement a comprehensive, secure development process to reduce risk and eliminate exposure to cyberattacks.
Basirico’s presentation, “Collaborating with Hackers and Researchers with a Bug Bounty Program,” is part of the company’s ongoing cybersecurity educational programing for security, IT and development professionals.
HOU.SEC.CON is sold out, but people interested in learning more can email info@securityinnovation.com to schedule a meeting with Security Innovation.
Session overview:
In today’s environment there is no arguing that a comprehensive secure development process is necessary. Fitting tools, technology, and security reviews into current development cycles has become table stakes for companies building the software of tomorrow.
Breaking the “find and fix” vulnerability-based assessment cycle so that software is developed with security in mind from start to finish is critically important, but doing this without leveraging a collaborative and social application security program that addresses bug bounty programs, security researchers, and every aspect of vulnerability disclosure misses a huge opportunity.
Key takeaways:
Basirico will explore how security programs can reach beyond the Secure Software Development Life Cycle (SDLC), including:
- Bug Bounty Programs – Why you should invite security researchers to hack your products.
- Marketing your Security Program – How, why and where you should market your security program for maximum effectiveness.
- How to Communicate with Security Researchers – What security researchers expect in communication, responsiveness, transparency and time to fix.
- Vulnerability Disclosure Options – What public vs. responsible disclosure means, and how to handle each.
- Integration with an Existing Security Program – You may already be training your developers, using outside vendors, and performing internal security testing, where do these other aspects fit in?
Click here to learn why Security Innovation is the worldwide leader in software security training and assessment services.
About Security Innovation
Since 2002, organizations have relied on Security Innovation for our unique software security expertise to help secure and protect sensitive data in the most challenging environments – automobiles, desktops, web applications, mobile devices and in the cloud. A best in class security training, assessment and consulting provider, Security Innovation has been named to the Gartner Magic Quadrant for Security Awareness Training for four consecutive years. Security Innovation is privately held and headquartered in Wilmington, MA USA. For more information, visit www.securityinnovation.com or connect with us on LinkedIn or Twitter.