AppSec Day Stockholm

As the application security industry evolves, various organizations are shifting their focus toward AI-based solutions by integrating with application security solutions for threat detection and prevention. It has developed as a key technology in the fight against these threats, offering the ability to detect and respond to security incidents in real-time.

The Fortify team at OpenText Cybersecurity invites you to join us for this event, where we’ll explore how innovation meets compliance with NIS2, EU Cyber Resilience Act and DORA.

Learn how to stay ahead of evolving application security threats with a close look at the transformative power of AI. We'll be joined by Ericsson who will be sharing their experiences to help your organization get clarity around Open-Source compliance risks and challenges with Generative AI.

What can you expect?

State of Cybersecurity with a close look at AI Amplified Code Security
Explore how innovation meets compliance with NIS2, EU Cyber Resilience Act and DORA.
Learn how to avoid risks entering the code in the first place with Start Left
Customer use cases
Network and collaborate: Connect with industry peers, share ideas, and collaborate on solutions to common AppSec challenges.

We’ll wrap up the day with a relaxing hour of socializing and enjoying some beers and bites.

8:00	Registration & Breakfast
8:45	Welcome
9:00	Will developers become extinct? Critical steps for developer security enablement in the brave new world of AI pair programming by Matias Madou, Co-Founder and Chief Technology Officer at Secure Code Warrior In this presentation, Matias Madou, will reveal, based on AI experiments and key research with CISOs, the critical pathways security leaders can take to execute developer-focused training programs that reduce risk, shift negative security sentiment in the development cohort, and safely adapt AI technology, including understanding comparisons between AI and human coding, what works, and what can affect enterprise security maturity.
9:45	Customer Case Ericsson: Open-Source compliance risks and challenges with generative AI by Jimmy Ahlberg, Director Open-Source Policy at Ericsson
10:30	Fika / Coffee Break
11:00	Mindset of Open-Source secure intake process for Developer by Jonathan Jogenfors, Principal Solutions Consultant at OT Build security knowledgeable developments teams and make it easy for them to find & only including safe & compliant code into the codebase in the first place Making sure that the developers are skilled and “security savvy” (SCW) Help developers to easily search and find the right OS that is safe & in compliance (Open Source Select) Block insecure OSS that should not find its way into the code (Sonatype Firewall)
12:30	Lunch Break
13:30	The impact of AI on Application Security Testing by Frans van Buul, Sr. Manager, Product Management at OT Join us as we explore the transformative role of AI in Application Security, focusing on Static Application Security Testing (SAST) and beyond. We'll investigate the opportunities that AI brings to AppSec. A key example is extremely accurate machine auditing: recognize which issues are false positives or noise and provide nuanced remediation advice for the rest. Additionally, we'll shift our lens to the emerging security vulnerabilities inherent in AI-driven applications, discussing how modern AppSec tools can address these challenges. We'll review the new OWASP LLM Top-10 as part of this.
14:15	Compliance Challenges in an ever-changing Landscape by Laurent Strauss, Lead Solutions Consultant Cybersecurity at OT We will investigate the rapidly shifting cyber and compliance landscape and evaluate the importance of application security to directives like NIS2 and Cyber Resilience Act. Furthermore, we will discuss the integration and deployment of open source and third party components and their potential adverse effect on critical supply chains across the European landscape.
15:00	Panel Discussion
15:30	Wrap Up & Network Drink