Sergey Sotnikov

36 Seguidores

1 SlideShare 36 Seguidores 82 Siguiendos

Application Security Analyst with over 15 years’ experience in the software development industry including 4+ years in Application (Software) Security and 5 years in offshore software development. Recognized for effective work as an individual contributor in an offshore setting and great in a teaming environment. Specialties: Experienced in software development (C++/.NET/C#, etc), managing small teams, project planning, conducting workshops and training courses, consulting, making presentations, and writing technical documentation. Strong communication skills in Russian and English.

bom cyclonedx dependency-track owasp risk open source application security software composition analysis sca

Actividad
Acerca de

Sergey Sotnikov

Presentaciones

OWASP Dependency-Track Introduction

Recomendaciones

we45 DEFCON Workshop - Building AppSec Automation with Python

An Attacker's View of Serverless and GraphQL Apps - Abhay Bhargav - AppSec California 2019

Threat-Modeling-as-Code: ThreatPlaybook AppSecUSA 2018 Presentation

DevSecCon Tel Aviv 2018 - Value driven threat modeling by Avi Douglen

O'Reilly SACon 2019 - (Continuous) Threat Modeling - What works?

"Threat Model Every Story": Practical Continuous Threat Modeling Work for Your Team

Secure Code Review 101

Understanding Application Threat Modelling & Architecture

Threat modeling demystified

Insecure coding in C (and C++)

"CERT Secure Coding Standards" by Dr. Mark Sherman

Software Security Metrics

Статический анализ кода в контексте SSDL

AppSec, ключ на старт! / Юрий Сергеев (Swordfish Security)

SecDevOps. Разработка, DevOps и безопасность.

How to do well in Bug bounty programs. Presentation at @nullhyd by Abhijeth

Bug Bounty - Hackers Job

The Game of Bug Bounty Hunting - Money, Drama, Action and Fame

The Secret Life of a Bug Bounty Hunter – Frans Rosén @ Security Fest 2016

Bug Bounty Hunter Methodology - Nullcon 2016

Bug Bounty Secrets

Bug Bounty for - Beginners

How to Shot Web - Jason Haddix at DEFCON 23 - See it Live: Details in Description

Testing tools

очир абушинов

Построение Secure Development Lifecycle

Security testing fundamentals

Сертификация специалистов по информационной безопасности

Мастер класс ПДн Бондаренко

Разработка ПО в рамках PCI DSS