33 min
Kevin Greene -- Shifting left
Robert and Chris interview Kevin Greene from Mitre. We discuss an article Kevin wrote about shifting left and exploring codifying intuitions and new…
Listen to the episodeEpisodes, page 12
304 episodes, going back to 2016. Showing 265–288.
32 min
Conclusion: OWASP is for everyone
This is the conclusion of Season 02 for the AppSec PodCast. This episode focuses on all the OWASP goodness we’ve experienced this year.
Listen to the episode30 min
Brian Andrzejewski -- Containers Again
This is the final interview from the #AppSecUSA Conference in Orlando, and Brian Andrzejewski joins Chris and Robert. He talks about containers, their usage within #AppSec, and orchestrations.
Listen to the episode23 min
Tin Zaw -- ModSecurity and #AppSec
Tin Zaw, an advocate for ModSecurity, joins Robert and Chris. He dives into its background, the use of rules, and the many advantages.
Listen to the episode24 min
Aditya Gupta -- The Exploitation of IoT
Aditya Gupta joins Robert and Chris. They speak with him about the many facets of IoT and some of its effects on pen testing, training, and mobile application security.
Listen to the episode20 min
Jim Manico and Katy Anton -- The Future of the OWASP Proactive Controls
Chris and Robert talk to Jim Manico and Katy Anton about the OWASP Proactive Controls project. We have discussed this before, and they are looking for feedback on the upcoming update.
Listen to the episode36 min
Andrew van der Stock and Brian Glas -- The Future of the OWASP Top 10
We talk about the future of the OWASP Top 10. We do this by meeting the new project leadership team, understanding the process for how they do governance…
Listen to the episode47 min
Robert Hurlbut -- Threat Modeling
On this week's episode of the #AppSec Podcast, Chris and Robert are at #AppSecUSA. We hear a conference talk done by Robert on the topic of Threat Modeling.
Listen to the episode32 min
Chris and Robert -- Passwords, Identity, and #AppSec
Robert and Chris talk about Passwords, something we all are familiar with. They dive into specifics with passwords and threats that can occur with them.
Listen to the episode35 min
Tanya Janca and Nicole Becher -- Hacking APIs and Web Services with DevSlop
Tanya and Nicole join Chris and Robert. They talk about what APIs are, how they are used, and some of the threats involved with them.
Listen to the episode45 min
Jon Mccoy and Jonathan Marcil -- Agile #AppSec
Robert and Chris speak with Jon Mccoy and Jonathan Marcil about using Agile #AppSec in the Secure Development Lifecycle.
Listen to the episode45 min
Jay Beale -- Docker Security and AppSec
A listener asked for a recommendation for a PodCast or Blog post about Docker security. We looked but couldn’t find one, so we created one.
Listen to the episode23 min
Chris and Robert -- Proactive Controls, AppSec USA, and Gartners MQ on AppSec Testing
Robert and I try a new format for discussing a few topics per episode. We discuss changes with the Proactive Controls, AppSecUSA, and the Gartner Magic Quadrant for Application Security Testing.
Listen to the episode21 min
Robert Hurlbut -- Blackhat Security Conference
We talk with Robert about his experiences at the Blackhat Security Conference. He will explain some of the AppSec-focused parts of the conference and more about the Alec Stamos Keynote.
Listen to the episode44 min
Dave Ferguson -- The OWASP Top 10 Proactive Controls
Dave Ferguson discusses the OWASP Top 10 Proactive Controls in this episode with Chris.
Listen to the episode37 min
Jim Manico -- MORE OWASP!
We’re here today with Jim Manico, a project lead with OWASP. We dive deep into some of the projects on his plate.
Listen to the episode32 min
Mike Goodwin -- The OWASP Threat Dragon
In this episode, we speak with Mike Goodwin, the founder of the OWASP Threat Dragon.
Listen to the episode40 min
Mark Willis -- I Just Like Static Analysis. Static Analysis is My Favorite
We’re back with another episode of The Application Security Podcast. This time, we talked to Mark Willis about the many facets of static analysis and how it affects the DevOps world.
Listen to the episode28 min
Eric Johnson -- Continuous Integration in .NET
Welcome back to season two of the Application Security Podcast. In this week's episode, we talk to Eric Johnson about static analysis, pen testing, continuous integration, etc. Thanks for listening!
Listen to the episode22 min
Matt Clapham -- The Technical Debt Ceiling
Our topic today is technical debt and how security plays into it. Chris was at Converge Conference 2017 in Detroit, Michigan (which he says is the best…
Listen to the episode31 min
Chris and Robert -- Controversy within the OWASP Top 10 RC
On this episode of the application security podcast, Robert and I jump over a wall. Just kidding. This isn’t Top Gear. This is our second episode of season two of the #AppSec PodCast.
Listen to the episode54 min
Brook S.E. Schoenfield -- Security in the Design and Architecture
This episode is an interview Robert and I did with Brook Schoenfield (@BrkSchoenfield) during the RSA Conference 2017. Brook S.E. Schoenfield is a Distinguished Engineer at Intel Security Group.
Listen to the episode19 min
Conclusion: The End…of Season 1
Good day, friends. The Application Security PodCast has concluded our first season. With many friends' help, we could record 18 episodes.
Listen to the episode37 min
Rafal Los, James Jardine, and Michael Santarcangelo -- #DtSR and What Makes a Good Security Consultant?
Greetings all! We have a treat for you in this episode. The crew joins Robert and me from the Down the Security Rabbit Hole Podcast.
Listen to the episode