I’ll be presenting on the BDD-Security framework at the OWASP AppSec Research conference in sunny Athens on the 13th July. Too many good talks, I wish it was a single track conference! Some talks on SDLC integration I’m looking forward to:

• Real World Threat Modelling via the PASTA Methodology
• I>S+D! – Integrated Application Security Testing (IAST), Beyond SAST/DAST
• Teaching an Old Dog New Tricks Securing Development with PMD
• Unraveling some of the Mysteries around DOMbased XSS
• Making Security Invisible by Becoming the Developer’s Best Friends