Next-Generation Dynamic Analysis in a DevSecOps World

Despite the rise of SAST, SCA, and other techniques, DAST remains a cornerstone of app security. However, it can be challenging for developers because it runs long after code is written and can demand significant effort to remediate issues despite its accuracy.

How can DAST become a more positive developer experience? Join this session to explore next-generation DAST in a DevSecOps world. We’ll dive into the advances in runtime monitoring, machine learning, and SAST accuracy that are opening new possibilities for dynamic testing and app security.

In this session, explore:

What are the benefits of traditional dynamic analysis and why do most AppSec teams still rely on it despite its limitations?
What makes DAST so difficult to fit inside a modern DevSecOps workflow?
What needs to change about DAST for it to provide a positive developer experience?
Can modern techniques like eBPF potentially enhance the value of DAST results for developers?
Is there a possibility of true DAST-to-SAST correlation on the horizon? What would this mean for the future of AppSec practice?

Speaker and Presenter Information

Clinton Herget, Field CTO, Snyk

Clinton Herget is Field CTO at Snyk, the leader in Developer Security, where he focuses on crafting and evangelizing our strategic vision for the evolution of DevSecOps. A seasoned technologist, Clinton spent his 20-year career prior to Snyk as a web software developer, DevOps consultant, cloud solutions architect, and engineering director. Clinton is passionate about empowering software engineers to do their best work in the chaotic cloud-native world, and is a frequent conference speaker, developer advocate, and technical thought leader.