Chief Technology Officer, Director, and Co-Founder
Matias Madou, Ph.D.
Matias is a researcher and developer with more than 15 years of hands-on software security experience. He has developed solutions for companies such as Fortify Software and his own company Sensei Security. Over his career, Matias has led multiple application security research projects which have led to commercial products and boasts over 10 patents under his belt. When he is away from his desk, Matias has served as an instructor for advanced application security training courses and regularly speaks at global conferences including RSA Conference, Black Hat, DefCon, BSIMM, OWASP AppSec and BruCon.
Matias holds a Ph.D. in Computer Engineering from Ghent University, where he studied application security through program obfuscation to hide the inner workings of an application.
Matias Madou, Ph.D. is a security expert, researcher, and CTO and co-founder of Secure Code Warrior. Matias obtained his Ph.D. in Application Security from Ghent University, focusing on static analysis solutions. He later joined Fortify in the US, where he realized that it was insufficient to solely detect code problems without aiding developers in writing secure code. This inspired him to develop products that assist developers, alleviate the burden of security, and exceed customers' expectations. When he is not at his desk as part of Team Awesome, he enjoys being on stage presenting at conferences including RSA Conference, BlackHat and DefCon.
众所周知，要找到有关安全设计计划成功与否的有意义的数据非常困难。首席信息安全官在试图在人员和公司层面证明安全计划活动的投资回报率 (ROI) 和商业价值时经常受到挑战。更不用说，企业尤其难以深入了解其组织如何根据当前的行业标准进行基准测试。总统的国家网络安全战略要求利益相关者 “通过设计来拥抱安全性和弹性”。使Secure-by-Design计划发挥作用的关键不仅是向开发人员提供确保安全代码的技能，还要向监管机构保证这些技能已经到位。在本演示中，我们分享了来自多个主要来源的大量定性和定量数据，包括从25万多名开发人员那里收集的内部数据点、数据驱动的客户见解和公开研究。利用这些数据点的汇总，我们的目标是传达多个垂直领域的安全设计计划的现状愿景。该报告详细介绍了该空间目前未得到充分利用的原因，成功的技能提升计划对降低网络安全风险可能产生的重大影响，以及从代码库中消除各类漏洞的可能性。
