STARWEST 2018 Concurrent Session : Measuring and Maximizing Crowdsourced Vuln Discovery

SEE PRICING & PACKAGES

Thursday, October 4, 2018 - 3:00pm to 4:00pm

Measuring and Maximizing Crowdsourced Vuln Discovery

Add to calendar

There are many crowdsourcing vulnerability discovery techniques available today, making it difficult for testers to choose an approach that finds important vulnerabilities while offering the best "bang for the buck." Join Mike Shema as he shares several years of real-world data that help you understand the different discovery techniques, such as bug bounty programs and scanners, and the best time to use each technique. Mike also discusses how your approach may change according to your lifecycle and ways to think about integrating security within that process. Mike shows how metrics play a pivotal role in determining where to focus your time to work as efficiently as possible while achieving the best results. Learn three key measures that help drive risk-based decisions while balancing your team’s efforts with the stakeholders’ need for information. Attend this session to learn new strategies to better use the power of crowdsourcing to find and fix important vulnerabilities in your systems.

Cobalt.io

Mike Shema is Vice President of SecOps and Research at Cobalt.io. Mike's experience with information security includes managing product security teams, building web application scanners, and consulting across a range of information security topics but that’s for work. For fun he writes books and blog posts about information security, with an infusion of references to music, sci-fi, and horror to keep the topics entertaining. His books include Anti-Hacker Tool Kit and Hacking Web Apps. He has taught hacking classes and presented research at conferences around the world. Passionate about this fascinating topic, he can be also followed on Twitter.