Security vulnerability management: OWASP DefectDojo

[mwager]

Title: Security vulnerability management: OWASP DefectDojo

• Speaker: Michael Wager (and maybe additional collegue)
• Affiliation: https://secure-io.de
• Preferred month: *
• Duration: regular (30min)
• Language: German or english, depends on audience

Short description

Various security scanners are used in AppSec programes (Src code, OSS supply chain, container images, etc.), generating a lot of data. DefectDojo is an open source central vulnerability management solution from OWASP to centrally manage these scan results and view the security status of applications.

We could talk a bit about OWASP, the Secure Development Lifecycle, AppSec programs & DevSecOps and finally give a demo of DefectDojo.

Audience

Developers, Project-Managers, DevOps-Engineers - basically anyone working in IT & SW-Development.

Regards!
Michael
https://mwager.de/about/