AI-assisted development is changing how applications are built, while introducing new application security challenges. As organisations increasingly use AI to generate code, they need to identify vulnerabilities earlier, understand exposure, prioritise risk and remediate issues before they reach production.
In the third session of the Mythos series, CyberProof and UST will explore how organisations can move towards a more secure-by-design application lifecycle, including:
– Secure-by-design: Embedding security from design through development and CI/CD, including threat modelling, security guardrails and cybersecurity reviews before applications progress.
– AI-assisted development: Understanding risks from AI-generated code, tools and workflows, and identifying vulnerabilities earlier, ideally at the IDE or source-control stage.
– Application exposure: Moving beyond separate security scans to identify vulnerabilities across code, secrets, dependencies, APIs and other areas of application exposure.
– Threat-led prioritisation: Moving beyond high volumes of findings to understand which issues pose the greatest risk based on the application’s threat profile, exploitability and active attack activity.
– Continuous validation: Continuously validating application risks and testing whether exposures are exploitable, moving beyond periodic security testing.
– Security & development collaboration: Bringing security and engineering teams closer together through collaboration, security office hours and shared decision-making around application risk.
– Governance & gating: Establishing clear remediation governance, SLAs and gating mechanisms so prioritised vulnerabilities are addressed, exceptions are managed and applications meet defined security requirements before progressing.
Ponentes: Daniel Deeney and Rajesh George