# AppSec Cali 2018: Izar Tarandach

DevFeed: [AppSec Cali 2018: Izar Tarandach](<https://devfeed.tech/articles/appsec-cali-2018-izar-tarandach-36674.md>)

Original publisher: [Read original article](<https://shostack.org/blog/appsec-cali-2018-izar-tarandach/>)

Author: Adam

Published: 2018-01-30T00:00:00Z

Content type: article

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Development](<https://devfeed.tech/topics/development.md>), [Requirements](<https://devfeed.tech/topics/requirements.md>), [Learning](<https://devfeed.tech/topics/learning.md>), [legacy](<https://devfeed.tech/topics/legacy.md>), [MySQL](<https://devfeed.tech/topics/mysql.md>)

Tags: [appsec](<https://devfeed.tech/tags/appsec.md>), [development](<https://devfeed.tech/tags/development.md>), [experiment](<https://devfeed.tech/tags/experiment.md>), [learning](<https://devfeed.tech/tags/learning.md>), [legacy](<https://devfeed.tech/tags/legacy.md>), [requirements](<https://devfeed.tech/tags/requirements.md>), [security](<https://devfeed.tech/tags/security.md>), [sql](<https://devfeed.tech/tags/sql.md>), [training](<https://devfeed.tech/tags/training.md>)

## AI overview

Notes from Izar Tarandach's AppSec Cali 2018 talk describe recurring development security failures, including incomplete requirements, insecure design, weak security awareness, and insecure code. The talk advocates integrating security expertise into development, using concise event-based guidance, training, checklists, and clearly defined responsibilities.

## Source excerpt

[no description provided]