The OWASP AppSec EU 2023 event was held in Dublin, Ireland and brought together security experts and developers from around the world to discuss the latest trends, challenges, and solutions in application security. The core concept of the event was "shifting left", which refers to the idea of integrating security into the software development lifecycle as early as possible, rather than leaving it as an afterthought.

The event featured a variety of keynote presentations, workshops, and panel discussions on a wide range of topics related to application security, including threat modeling, vulnerability scanning, secure coding practices, and DevSecOps. One of the key themes that emerged from the event was the need for new additions to the DevSecOps approach, in order to make it more effective and efficient.

DevSecOps is an approach that emphasizes the importance of integrating security into the software development process from the very beginning, in order to identify and address potential security issues early on, and to ensure that security is a top priority throughout the development lifecycle. However, as the field of application security continues to evolve, it has become clear that DevSecOps needs to be adapted and expanded in order to keep up with the latest threats and challenges.

One of the challenges that DevSecOps faces is the growing complexity of modern software applications. As applications become more complex and more interconnected, it becomes increasingly difficult to identify and manage security risks. In order to address this challenge, several speakers at the OWASP AppSec EU 2023 event emphasized the importance of incorporating a "security as code" approach into DevSecOps, which involves using automation and code to manage security controls and testing throughout the development process.

Another challenge that DevSecOps faces is the need to keep up with the latest threat landscape. As new types of attacks and vulnerabilities emerge, it is essential for DevSecOps teams to be able to quickly adapt and respond. To address this challenge, several speakers at the event discussed the importance of incorporating threat intelligence and machine learning into the DevSecOps process, in order to help identify and respond to potential threats more quickly and effectively.

In addition to these challenges, the OWASP AppSec EU 2023 event also highlighted the importance of culture and collaboration in successful application security. Several speakers emphasized the need for a collaborative, team-based approach to DevSecOps, in which security experts, developers, and other stakeholders work together to identify and address security risks throughout the development process. This requires a culture of open communication, shared responsibility, and a commitment to continuous improvement.

Overall, the OWASP AppSec EU 2023 event provided valuable insights into the latest trends and challenges in application security, and emphasized the importance of "shifting left" and incorporating security into the software development lifecycle from the very beginning. However, it also made it clear that in order to be truly effective, DevSecOps needs to be adapted and expanded in response to the evolving threat landscape and the growing complexity of modern applications. This requires a commitment to continuous learning, collaboration, and innovation, as well as a culture of security that permeates all aspects of the development process.

Authors
Petros Theocharis – Senior Application Security Engineer
Konstantinos Mouzoulas – DevSecOps Engineer