DevSecOps - Making It Real - Mike Rothman - ASW #162 | Security Weekly Podcast Network (Video) Podcast

DevSecOps - Making It Real - Mike Rothman - ASW #162: DevSecOps is an aspirational vision for many teams. With a number of macro changes occurring in modern application development, this segment will explore what tangible, practical things can be done today by security teams that add immediate value.... by Application Security Weekly (Video)

33 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Application Security Weekly (Video)

37 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Security Weekly Podcast Network (Video)

37 min listen

Visualizing & Detecting Threats For Your Custom Application - Justin Massey - ASW #122: Application logs are critical to DevOps teams for monitoring the performance and health of their apps. Those same logs are just as critical to understanding the security of apps, whether detecting attacks or responding to them. So, it's important that... by Security Weekly Podcast Network (Video)

41 min listen

Visualizing & Detecting Threats For Your Custom Application - Justin Massey - ASW #122: Application logs are critical to DevOps teams for monitoring the performance and health of their apps. Those same logs are just as critical to understanding the security of apps, whether detecting attacks or responding to them. So, it's important that... by Application Security Weekly (Video)

41 min listen

SWVHSC: How Does Sec Live In A DevOps World? - Mike Rothman - ASW #117: As you go full DevSecOps, where does that leave security operations? Who makes changes that are required? How do you empower (or deputize) app folks or ops folks (DevOps) to make those operational changes? What kind of tooling is going to meet the... by Security Weekly Podcast Network (Video)

34 min listen

SWVHSC: How Does Sec Live In A DevOps World? - Mike Rothman - ASW #117: As you go full DevSecOps, where does that leave security operations? Who makes changes that are required? How do you empower (or deputize) app folks or ops folks (DevOps) to make those operational changes? What kind of tooling is going to meet the... by Application Security Weekly (Video)

34 min listen

Unify DevOps and SecOps - ESW #166: DevSecOps is all the rage, but what does it really mean? How do you achieve the integration of Security into DevOps? This segment explores the people and process challenges of DevSecOps and where to integrate security seamlessly into the DevOps... by Enterprise Security Weekly (Video)

30 min listen

Unify DevOps and SecOps - ESW #166: DevSecOps is all the rage, but what does it really mean? How do you achieve the integration of Security into DevOps? This segment explores the people and process challenges of DevSecOps and where to integrate security seamlessly into the DevOps... by Security Weekly Podcast Network (Video)

30 min listen

Enhancing Software Security with DevSecOps by Continuous improvement

8 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Application Security Weekly (Video)

40 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Video)

40 min listen

Building Security Into the DevOps Lifecycle - Sumedh Thakar - PSW #666: DevOps has gained momentum over the years as its methods have been used by teams worldwide to accelerate application delivery. But where we continue to struggle is in integrating security into this workflow. In this discussion, Sumedh Thakar,... by Security Weekly Podcast Network (Video)

59 min listen

Cloud Native Security Platforms - John Morello - ASW #143: Modern appsec demonstrates the importance of a cloud native strategy for enterprise security and how much that strategy must integrate with DevOps tools and workflows. Security solutions need to come from a cohesive platform that addresses the... by Security Weekly Podcast Network (Video)

34 min listen

Cloud Native Security Platforms - John Morello - ASW #143: Modern appsec demonstrates the importance of a cloud native strategy for enterprise security and how much that strategy must integrate with DevOps tools and workflows. Security solutions need to come from a cohesive platform that addresses the... by Application Security Weekly (Video)

34 min listen

Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170: There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important to understand how to... by Security Weekly Podcast Network (Video)

38 min listen

Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170: There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important to understand how to... by Application Security Weekly (Video)

38 min listen

What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241: What happens to an app's security after six months? What about a year or two years? A Secure SDLC needs to maintain security throughout an app's lifetime, but too often the rate of new flaws can outpace the rate of new code within an app. Appsec teams... by Application Security Weekly (Video)

41 min listen

What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241: What happens to an app's security after six months? What about a year or two years? A Secure SDLC needs to maintain security throughout an app's lifetime, but too often the rate of new flaws can outpace the rate of new code within an app. Appsec teams... by Security Weekly Podcast Network (Video)

41 min listen

Shifting Focus to Make DevSecOps Successful - Janet Worthington - Janet Worthington - ASW #258: What if all these recommendations to shift left were more about shifting focus? It's all too easy to become preoccupied with vulns, whether figuring out how to find them earlier in the SDLC or spending time fixing them within specific number of days.... by Application Security Weekly (Video)

40 min listen

Shifting Focus to Make DevSecOps Successful - Janet Worthington - ASW #258: What if all these recommendations to shift left were more about shifting focus? It's all too easy to become preoccupied with vulns, whether figuring out how to find them earlier in the SDLC or spending time fixing them within specific number of days.... by Security Weekly Podcast Network (Video)

40 min listen

Broadening What We Call AppSec - Christien Rioux - ASW #179: There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take to broaden what we call appsec into something effective for modern apps, whether they're on the web, mobile, or cloud? We'll talk about... by Application Security Weekly (Video)

37 min listen

Broadening What We Call AppSec - Christien Rioux - ASW #179: There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take to broaden what we call appsec into something effective for modern apps, whether they're on the web, mobile, or cloud? We'll talk about... by Security Weekly Podcast Network (Video)

37 min listen

Broadening What We Call AppSec - Christien Rioux - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on January 10, 2022. There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take... by Application Security Weekly (Video)

36 min listen

Why DAST - from Project Management Perspective - Suha Akyuz - ESW #233: More than 96% of software development projects fail across the globe because too many businesses rely on the legacy DevOps process which allows us to run security testing right before going to production. Using the legacy DevOps can lead to a downfall... by Enterprise Security Weekly (Video)

31 min listen

Broadening What We Call AppSec - Christien Rioux - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on January 10, 2022. There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take... by Security Weekly Podcast Network (Audio)

36 min listen

Broadening What We Call AppSec - Christien Rioux - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on January 10, 2022. There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take... by Security Weekly Podcast Network (Video)

36 min listen

Why DAST - from Project Management Perspective - Suha Akyuz - ESW #233: More than 96% of software development projects fail across the globe because too many businesses rely on the legacy DevOps process which allows us to run security testing right before going to production. Using the legacy DevOps can lead to a downfall... by Security Weekly Podcast Network (Video)

31 min listen

Always Interesting - ASW #143: This week, we welcome John Morello, VP of Product at Palo Alto Networks, joins us to talk about Cloud Native Security Platforms! Modern appsec demonstrates the importance of a cloud native strategy for enterprise security and how much that strategy... by Security Weekly Podcast Network (Audio)

62 min listen

Challenges of DAST Scanners / Adoption by Developers - Nuno Loureiro, Tiago Mendo - ASW #155: What are some of the DAST scanners challenges, like coverage of modern apps, point & shoot, scan time, partial scans, or scanning at scale? What do developers look for in a DAST scanner? This segment is sponsored by Probely. Visit to learn... by Security Weekly Podcast Network (Video)

40 min listen

Discover this podcast and so much more

DevSecOps - Making It Real - Mike Rothman - ASW #162

DevSecOps - Making It Real - Mike Rothman - ASW #162

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes