GET INSPIRED

Hear how leaders and pioneers are overcoming challenges and making a difference for their organizations.

NETWORK

Meet forward-thinking experts from across all industries.

TRAIN YOUR TEAM

Get hands on training and learn how to use the tools and techniques that make a difference.

Application Security

The walls between application development, security, and operations are dissolving, and the responsibility for ensuring application security throughout the SDLC is now shared by the Security, Development, and DevOps teams. As organizations move to more integrated and automated software development models, they must also consider how they will integrate application security across their processes and toolchains. This can be a daunting task for security and development professionals, especially given the wide range of tools and techniques available.

In this track we’ll explore how application security can be integrated throughout the SDLC, from the IDE to the production environment. We’ll also dig into how static, dynamic, and software composition analysis techniques can be combined at each stage of development, testing, and deployment to address different types of security risks.

Open Source, Legal Risk, and Due Diligence

Open source components form the backbone of nearly every application in every industry. And as open source use continues its massive growth, so too do the license compliance issues and potential security vulnerabilities that come along with it. Whether a company is managing its own or a supplier’s software, or in the process of acquiring another company, it needs to be mindful of open source risks in addition to other related issues. 

This track dives into the world of managing open source license compliance and security, M&A due diligence, how recent litigation affects the way you need to think about open source, and what new and emerging trends you need to prepare for. The sessions will provide valuable information for attorneys advising tech companies (both in-house and outside), technical folks supporting and managing software development, and anyone involved in technology M&A.