I was honored to participate at 2 different panels at Java2Days 2019, discussing with fellow experts about software application security & privacy.

Here are my key suggestions on how to build secure apps:

• Treat your source code as if it were “open source”. (Would you save usernames/passwords in your code if everyone could see them?)
• Enhance your CI to run a static source code analysis for each commit, to promptly identify bad coding practices that may lead to security vulnerabilities.
• Use a tool that finds all the dependencies of your application (i.e. the 3rd party libraries being used) and checks them for known security vulnerabilities.

Additionally, I gave a presentation on the subject of: “How to Improve the Quality of Your Application (I Wish I’d Known This Earlier!)”, providing 5 practical steps that every developer can apply in their daily work to significantly reduce bugs.