35 mintranscript
Anastasiia Voitova — Use Cryptography; Don’t Learn It
Developers need to protect data, but should they need to become cryptographers to do it safely?
Listen to the episodeEpisodes, page 8
316 episodes, going back to 2016.
Michael Furman — SameSite Cookies
Michael Furman is the Lead Security Architect at Tufin, and is responsible for the security and Security Development Lifecycle (SDL) of Tufin software products.
Listen to the episode44 mintranscript
Chris Romeo — The State of Security and the Importance of Empathy
Network engineers and application security teams depend on each other, yet often struggle to understand each other’s responsibilities.
Listen to the episodeNeil Matatall — Content Security Policy
Neil Matatall is a product security engineer at GitHub. He focuses on designing and engineering user experiences solutions related to authentication and account recovery.
Listen to the episodeGrant Ongers — Gamification of threat modeling
Grant Ongers (@rewtd) is co-founder of the bearded trio called Secure Delivery, with a philosophy and purpose for optimal delivery and security in one dynamic package.
Listen to the episodeElie Saad — OWASP WSTG, Cheat Sheets, and Integration
Elie Saad is an application security engineer, leading three different OWASP projects.
Listen to the episodeGraham Holmes — Adversarial Machine Learning
Graham Holmes is the founder and owner of AoP CyberSecurity, LLC whose mission is to enable organizations to “create scalable and effective strategies for trustworthy outcomes.
Listen to the episodeOchaun Marshall — Securing Web applications in AWS
Ochaun Marshall is a developer and security consultant. In his roles at Secure Ideas, he works on ongoing development projects utilizing Amazon Web Services and breaks other people's web applications.
Listen to the episodeDrew Dennison – Security should make the computer sweat more
Drew Dennison is the CTO & co-founder of r2c, a startup working to profoundly improve software security and reliability to safeguard human progress.
Listen to the episodeAaron Guzman — IoTGoat
Aaron Guzman specializes in IoT, embedded, and automotive security. Aaron is the Co-Author of “IoT Penetration Testing Cookbook”.
Listen to the episodeAdam Shostack — The Jenga View of Threat Modeling
Adam Shostack is a leading expert on threat modeling, and consultant, entrepreneur, technologist, author and game designer.
Listen to the episodeCindy Blake — Aligning security testing with Agile development
Cindy Blake is the Senior Security Evangelist at GitLab. Cindy collaborates around best practices for integrated DevSecOps application security solutions with major enterprises.
Listen to the episodeJannik Hollenbach — Multijuicer: JuiceShop with a side of Kubernetes
Jannik Hollenbach is a Security Automation Engineer at iteratec GmbH, working on and with open source security testing tools to continuously detect security…
Listen to the episodeSebastien Deleersnyder and Bart De Win — OWASP SAMM
How does an organization improve software security without reducing maturity to a checklist?
Listen to the episodeMarc French, Steve Lipner, Maya Kaczorowski, DJ Schleen, Kim Wuyts — Season Six Wrap up
Season six closes by revisiting five conversations that capture the breadth of application security.
Listen to the episodeMark Merkow — Secure, Resilient, and Agile Software Development
Mark Merkow works at WageWorks in Tempe, Arizona, leading application security architecture and engineering efforts in the office of the CISO.
Listen to the episodeZsolt Imre — Fuzz testing is easy
Fuzz testing can sound specialized and difficult, but Zsolt Imre argues that teams can start small and learn quickly.
Listen to the episodeAdam Shostack — Remote Threat Modeling
Adam joins us to discuss remote threat modeling, and we do a live threat modeling exercise to figure out how remote threat modeling actually works.
Listen to the episode28 mintranscript
Kim Wuyts — Privacy Threat Modeling
A system can protect data from attackers and still violate the privacy of the people using it.
Listen to the episode42 mintranscript
John Martin — Preventing a Cyberpocalypse
What happens when society’s dependence on software grows faster than its ability to make that software safe?
Listen to the episode41 mintranscript
Jeremy Long — It’s dependency check, not checker
How do you discover vulnerable libraries when the names developers use do not match the names in vulnerability databases?
Listen to the episode44 mintranscript
Alyssa Miller — Experiences with DevOps + Automation and beyond
Automating security tests is useful, but it does not by itself make a development team secure.
Listen to the episode29 mintranscript
Vandana Verma — Support each other
Building a stronger security community means helping more kinds of people participate and succeed.
Listen to the episode38 mintranscript
DJ Schleen — DevOps: The Sec is Silent
What changes when security becomes part of delivering software instead of a separate gate?
Listen to the episode