Abstract
AI is changing not only what software teams build, but how quickly and autonomously they design, generate, test, deploy, and maintain it. This talk examines how that shift may affect the OWASP Software Assurance Maturity Model (SAMM): its technology-agnostic governance, design, implementation, and operations practices remain a strong foundation, but maturity assessments and control expectations may need to evolve for AI-assisted and agentic development. We will explore the implications for human accountability, secure design and threat modeling, policy-as-machine-readable context, code and dependency assurance, accelerated verification, and AI-specific risks such as prompt injection, data exposure, model integrity, and IP or compliance concerns.
Speaker Bio
Aram is the founder, CEO of Codific and a security and privacy expert. He has over 15 years of professional experience in designing and building complex software systems by explicitly focusing on security. He believes application security is a holistic discipline. Aram has a PhD in cybersecurity from DistriNet, KULeuven which provides him with a broad knowledge of the security landscape. Throughout his academic years he has mainly focused on privacy threat modeling and streamlining the LINDDUN methodology.