Shift Left in Security Explained: Integrating Security Throughout the SDLC

Sami Eltamawy Talks Podcast

Shift Left in Security Explained: Integrating Security Throughout the SDLC

Play Episode Pause Episode

1x

00:00 /

Amazon Apple Podcasts Podbean RSS Spotify YouTube

RSS Feed

Share

Link

Embed

<blockquote class="wp-embedded-content" data-secret="Rt0wdGtoH9"><a href="https://www.samieltamawy.com/podcast/shift-left-in-security-explained-integrating-security-throughout-the-sdlc/">Shift Left in Security Explained: Integrating Security Throughout the SDLC</a></blockquote><iframe sandbox="allow-scripts" security="restricted" src="https://www.samieltamawy.com/podcast/shift-left-in-security-explained-integrating-security-throughout-the-sdlc/embed/#?secret=Rt0wdGtoH9" width="500" height="350" title="&#8220;Shift Left in Security Explained: Integrating Security Throughout the SDLC&#8221; &#8212; Sami Eltamawy" data-secret="Rt0wdGtoH9" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" class="wp-embedded-content"></iframe><script> /*! This file is auto-generated */ !function(d,l){"use strict";l.querySelector&&d.addEventListener&&"undefined"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!/[^a-zA-Z0-9]/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),o=l.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),c=new RegExp("^https?:$","i"),i=0;i<o.length;i++)o[i].style.display="none";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute("style"),"height"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):"link"===t.message&&(r=new URL(s.getAttribute("src")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener("message",d.wp.receiveEmbedMessage,!1),l.addEventListener("DOMContentLoaded",function(){for(var e,t,s=l.querySelectorAll("iframe.wp-embedded-content"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute("data-secret"))||(t=Math.random().toString(36).substring(2,12),e.src+="#?secret="+t,e.setAttribute("data-secret",t)),e.contentWindow.postMessage({message:"ready",secret:t},"*")},!1)))}(window,document); //# sourceURL=https://www.samieltamawy.com/wp-includes/js/wp-embed.min.js </script>

In this episode, I explore the crucial principle of ‘Shift Left’ in security, emphasizing the integration of security measures early in the software development lifecycle (SDLC). I will explain the necessity of moving security considerations from late stages, such as post-release testing, to the very beginning—starting from ideation, requirements, and design stages. Highlighting the benefits of early security integration in terms of cost savings and developer satisfaction, the video covers various methods such as security training, system design review, static and dynamic analysis, and bug bounty programs. This comprehensive approach to embedding security into each phase of the development process not only preempts vulnerabilities but also fosters a collaborative and proactive security culture within the development team.