AppSec & DevSecOps Singapore schedule

AI is rewriting how software is built, and how it can be broken. From AI-generated code to a surge in malicious open-source packages, the modern supply chain has expanded faster than most security strategies can keep up. In this session, JFrog explores what it takes to establish trust across every binary, model, and artifact moving through your pipelines, without slowing innovation.

• Strategies to increase development velocity without compromising security standards
• Designing pipelines and controls that scale with fast-moving engineering teams
• Managing risk and accountability in highly automated development environments
• Cultural and operational changes needed to embed security into everyday delivery
  
   Speakers
  Reuben Athaide Head Innovation, Application Security and Assurance Standard Chartered
  Anthony Lim Fellow Global Fintech Institute (GFI) 
  Shilpy Banerjee Cyber Security Manager - Africa and Asia Yara International
  Yenn Jie Ho Principal Systems Engineer GovTech 
  

• Best practices for integrating SAST, DAST, and runtime protection into CI/CD pipelines
• Modern threat modelling techniques and secure coding practices for high-velocity teams
• Balancing security coverage with development speed to avoid bottlenecks
• Case studies of AppSec adoption at scale without slowing innovation

Artificial Intelligence is transforming how software is built, accelerating innovation while introducing entirely new security risks. This session explores how AI is reshaping the application security landscape, the emerging threats organisations face, and the strategies security teams can adopt to enable AI safely without slowing development.

• Strategies for restoring systems quickly while preserving security and compliance
• Maintaining team productivity and workflow continuity during and after incidents
• Practical approaches to learning from every incident: improving processes and preventing repeat issues

AI is accelerating software development, increasing both the speed and volume of code being produced. For security teams, this means more findings to assess, prioritise and remediate - without slowing developers down.

This session demonstrates how Checkmarx Developer Assist brings security directly into the developer workflow to identify, understand and fix vulnerabilities as they code, while AI-powered Triage and Remediation helps security teams quickly understand and prioritise what matters.

The result: less manual effort, faster remediation, and security that keeps pace with modern development.

• Integrating security practices from design to deployment in Agile workflows
• Upskilling engineers and staff to maintain security resilience under pressure
• Creating a culture where security is a shared responsibility, not an afterthought

AI is reshaping software development by boosting productivity and accelerating delivery, but it also introduces new security, quality, and governance challenges through AI-generated code, open source usage, and modern DevOps practices. This session explores how organisations can securely adopt AI-assisted development by integrating application security into developer workflows and aligning AppSec programs with evolving development practices. It also highlights how Black Duck Agentic AI AppSec helps teams reduce alert fatigue, prioritise exploitable risks, and provide actionable, AI-driven remediation guidance, enabling organisations to balance speed, innovation, and security while building more resilient software without slowing developer productivity.