A software development organization must have a well defined set of security policies and procedures for security management. At WSO2, security is a top priority and we work proactively to ensure the safety of the products we develop. This webinar will give you insight into how our platform security team collaborates with other product teams, customers and external security researchers to manage the overall security of all WSO2 products. It will also explore strategic initiatives we have taken when producing secure software. In this session, Tharindu discussed the following: How security is integrated into the software development life cycle of WSO2 Security integration in the automated software build processes The mandatory security checks performed before releasing products The security vulnerability reporting process of WSO2 How the WSO2 security team collaborates with other parties The security patch release strategy How you can become a contributor

1. A Proactive Strategy for Security
Management at WSO2
Tharindu Edirisinghe
Senior Software Engineer
WSO2 Platform Security Team

2. Agenda
● How security is integrated into the software development life cycle of WSO2
● Security integration in the automated software build processes
● The mandatory security checks performed before releasing products
● The security vulnerability reporting process of WSO2
● How the WSO2 security team collaborates with other parties
● The security patch release strategy
● How you can become a contributor

3. Security in Software Development Life Cycle

4. Team Collaboration and Governance

5. Security in 3rd Party Dependencies

6. Security in 3rd Party Dependencies Contd.

7. Security Best Practices in Development Phase

8. Security in Testing Phase

9. Automated Security Scans in Build Process

10. Security Checks Before Releasing Products

11. Reporting a Security Vulnerability

12. Security Patch Release Strategy

13. Monthly Security Bulletin - Customer Announcement

14. Security
Advisory -
Example

15. Security
Advisory -
Example
contd.

16. Security Patch Release - Public Announcement
http://wso2.com/security-patch-releases/

17. Security
Advisories -
Public
https://docs.wso2.com/display/Security/Security+Advisories

18. Acknowledgements
https://docs.wso2.com/display/Security/Acknowledgments

19. Awareness on Security

20. How you can contribute ?

21. Questions?

22. Thank You!