Stephen de Vries

39 Followers

Stephen specialises in building software and providing services to secure the SDLC. He has a strong background in web application and particularly Java security, with an emphasis on automated security testing and risk assessment. He has published numerous original research papers and presented at conferences such as Blackhat USA/Europe, DevOps Connect, Devoxx and OWASP, amongst others. He was a founding leader of the OWASP Java Project and contributor to OWASP ASVS and Testing projects. As CTO and founder of Continuum Security he's responsible for product development of the IriusRisk threat modelling tool as well as the BDD-Security open source testing framework which is used extensi...

devops security automated security testing secure sdlc threat model threat modeling scaling threat modeling devopssec rugged software devsecops devops seguridad despliegue continua rugged devops secdevops security devops security testing swsec appsec bdd-security software security security

Activity
About

Stephen de Vries

Presentations

Continuous Security Testing in a Devops World #OWASPHelsinki

Continuous Security Testing in a Devops World

Continuous Security Testing with Devops - OWASP EU 2014

Continuous and Visible Security Testing with BDD-Security

Automating security tests for Continuous Integration

Pruebas de seguridad continuas para dev ops

Continuous Security Testing - DevSecCon

Threat modeling with architectural risk patterns

Scalable threat modelling with risk patterns

Just Enough Threat Modeling

Likes

OWASP AppSec EU - SecDevOps, a view from the trenches - Abhay Bhargav

SecDevOps - The Operationalisation of Security

SecDevOps: Development Tools for Security Pros

Agile Secure Software Development in a Large Software Development Organisation: Security Testing