While the general view from the outside is that security just sort of happens, it's hard to see what goes into the day-to-day of releasing new products. How do large companies decide that something is (or isn't secure), how do they fix bugs before launch and how do they receive bugs afterward?

This talk will take an overview of what security review/auditing looks like and how Vulnerability reward programs operate and compliment this. It will be held by Paul Devitt, working at the Product Security team and Vulnerability rewards program at Google.

Slides: https://docs.google.com/presentation/d/1oC8JqyTMRG15C-E1qTUxcxMw7Ra4diWXVtl2iXv7g1c/edit?usp=sharing