AppSec Orchestration/Correlation & DevSecOps Efficiency - Anita D'Amico, Patrick Carey - ASW #167 | Security Weekly Podcast Network (Video) Podcast

AppSec Orchestration/Correlation & DevSecOps Efficiency - Anita D'Amico, Patrick Carey - ASW #167: In its 2019 Hype Cycle for Application Security report, Gartner revealed a new, “high-priority” category called Application Security Orchestration and Correlation (ASOC). ASOC delivers three primary benefits to the AppSec process within... by Application Security Weekly (Video)

38 min listen

Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Application Security Weekly (Video)

36 min listen

Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Security Weekly Podcast Network (Video)

36 min listen

Under Pressure - Building Security Into Application Development - Patrick Carey - ESW #196: A recent study by Enterprise Strategy Group, commissioned by Synopsys, revealed that nearly half of the cybersecurity and development professionals surveyed indicate that their organization knowingly pushes vulnerable code into production due to time... by Enterprise Security Weekly (Video)

32 min listen

Under Pressure - Building Security Into Application Development - Patrick Carey - ESW #196: A recent study by Enterprise Strategy Group, commissioned by Synopsys, revealed that nearly half of the cybersecurity and development professionals surveyed indicate that their organization knowingly pushes vulnerable code into production due to time... by Security Weekly Podcast Network (Video)

32 min listen

Developers are Taking Over Application Security with Jeffrey Martin: As we enter the New Year, I thought it would be a great idea to go over the state of application security (AppSec), especially how developers are getting more and more involved with their team's security testing efforts. So in , Jeffrey Martin, a... by TestGuild Security Testing Podcast

29 min listen

ASW #203 - Farshad Abasi: This week in the AppSec News: Apple introduces Lockdown Mode, PyPI hits 2FA trouble, cataloging cloud vulns, practical attacks on ML, NIST's post-quantum algorithms, & more! Appsec starts with the premise that we need to build secure code,... by Security Weekly Podcast Network (Audio)

70 min listen

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203: Appsec starts with the premise that we need to build secure code, but it also has to be able to recommend effective practices and tools that help developers. This also means appsec teams need to work with developers to create criteria for security... by Application Security Weekly (Video)

35 min listen

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203: Appsec starts with the premise that we need to build secure code, but it also has to be able to recommend effective practices and tools that help developers. This also means appsec teams need to work with developers to create criteria for security... by Security Weekly Podcast Network (Video)

35 min listen

Findings From the 2021 AppSec Shift Left Progress Report - Manish Gupta - ASW #165: Data from the ShiftLeft customer report shows that companies that have rebuilt their core testing processes around faster and more accurate static analysis are able to release more secure code at scale, scan more frequently, fixes earlier in the... by Security Weekly Podcast Network (Video)

37 min listen

Findings From the 2021 AppSec Shift Left Progress Report - Manish Gupta - ASW #165: Data from the ShiftLeft customer report shows that companies that have rebuilt their core testing processes around faster and more accurate static analysis are able to release more secure code at scale, scan more frequently, fixes earlier in the... by Application Security Weekly (Video)

37 min listen

Visualizing & Detecting Threats For Your Custom Application - Justin Massey - ASW #122: Application logs are critical to DevOps teams for monitoring the performance and health of their apps. Those same logs are just as critical to understanding the security of apps, whether detecting attacks or responding to them. So, it's important that... by Security Weekly Podcast Network (Video)

41 min listen

Visualizing & Detecting Threats For Your Custom Application - Justin Massey - ASW #122: Application logs are critical to DevOps teams for monitoring the performance and health of their apps. Those same logs are just as critical to understanding the security of apps, whether detecting attacks or responding to them. So, it's important that... by Application Security Weekly (Video)

41 min listen

Why Transparency Matters & Web Application Prioritization - Mark Ralls, Wayne Haber - ESW #235 by Enterprise Security Weekly (Video)

39 min listen

Why Transparency Matters & Web Application Prioritization - Mark Ralls, Wayne Haber - ESW #235: The shift away from web application security, caused by the pandemic and the focus on remote workforces, resulted in an increased number of web vulnerabilities. In this segment, Mark talks about the best starting point for organizations to get back on... by Security Weekly Podcast Network (Video)

39 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Application Security Weekly (Video)

40 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Video)

40 min listen

Drive - ASW #165: This week, we welcome Manish Gupta, CEO and Co-Founder of ShiftLeft, to discuss Findings From the 2021 AppSec Shift Left Progress Report! Data from the ShiftLeft customer report shows that companies that have rebuilt their core testing processes... by Security Weekly Podcast Network (Audio)

74 min listen

AI Risks, Application Performance - Padraic O'Reilly, Shibu George - BSW #339: Released on January 26, 2023, the NIST AI RMF Framework was developed through a consensus-driven, open, transparent, and collaborative process that included a Request for Information, several draft versions for public comments, multiple workshops, and... by Security Weekly Podcast Network (Audio)

66 min listen

What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241: What happens to an app's security after six months? What about a year or two years? A Secure SDLC needs to maintain security throughout an app's lifetime, but too often the rate of new flaws can outpace the rate of new code within an app. Appsec teams... by Security Weekly Podcast Network (Video)

41 min listen

DevSecOps - Making It Real - Mike Rothman - ASW #162: DevSecOps is an aspirational vision for many teams. With a number of macro changes occurring in modern application development, this segment will explore what tangible, practical things can be done today by security teams that add immediate value.... by Security Weekly Podcast Network (Video)

33 min listen

What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241: What happens to an app's security after six months? What about a year or two years? A Secure SDLC needs to maintain security throughout an app's lifetime, but too often the rate of new flaws can outpace the rate of new code within an app. Appsec teams... by Application Security Weekly (Video)

41 min listen

DevSecOps - Making It Real - Mike Rothman - ASW #162: DevSecOps is an aspirational vision for many teams. With a number of macro changes occurring in modern application development, this segment will explore what tangible, practical things can be done today by security teams that add immediate value.... by Application Security Weekly (Video)

33 min listen

Automated Pentesting, AI in SecOps, & AI-Powered Analytics - Jason Keirstead, Jay Mar-Tang, Anthony Aurigemma - ESW #361: Despite building up impressive security stacks in the Cloud, organizations are still struggling to keep their environments safe. Pentera recently introduced Pentera Cloud as the first tool to provide automated pentesting capabilities for cloud... by Security Weekly Podcast Network (Video)

45 min listen

Automated Pentesting, AI in SecOps, & AI-Powered Analytics - Jason Keirstead, Jay Mar-Tang, Anthony Aurigemma - ESW #361: Despite building up impressive security stacks in the Cloud, organizations are still struggling to keep their environments safe. Pentera recently introduced Pentera Cloud as the first tool to provide automated pentesting capabilities for cloud... by Enterprise Security Weekly (Video)

45 min listen

Mitigating AppSec Risk with Systematic Testing and Effective Attack Mitigation - Karl Triebes, Patrick Vandenberg - ASW #239: Without visibility into your entire web application attack surface and a continuous find and fix strategy, dangerous threats can expose your organization's blind spots and create risk. Invicti analyzes common web application vulnerabilities across... by Application Security Weekly (Video)

29 min listen

Mitigating AppSec Risk with Systematic Testing and Effective Attack Mitigation - Karl Triebes, Patrick Vandenberg - ASW #239: Without visibility into your entire web application attack surface and a continuous find and fix strategy, dangerous threats can expose your organization's blind spots and create risk. Invicti analyzes common web application vulnerabilities across... by Security Weekly Podcast Network (Video)

29 min listen

Key Findings From The Newly Released BSIMM11 Report - Mike Ware - PSW #667: BSIMM11, the latest version of the Building Security In Maturity Model (BSIMM), was created to help organizations plan, execute, measure, and improve their Application Security program/initiatives. BSIMM11 reflects the software security practices... by Security Weekly Podcast Network (Video)

49 min listen

Why Less Is More for Static Application Scanning - Surag Patel - ESW #246: Seeking to capitalize on the full potential of digital transformation, organizations are turning to serverless applications to accelerate development cycles, reduce operational complexities, and improve efficiencies. But as organizations embrace... by Security Weekly Podcast Network (Video)

30 min listen

Why Less Is More for Static Application Scanning - Surag Patel - ESW #246: Seeking to capitalize on the full potential of digital transformation, organizations are turning to serverless applications to accelerate development cycles, reduce operational complexities, and improve efficiencies. But as organizations embrace... by Enterprise Security Weekly (Video)

30 min listen

Discover this podcast and so much more

AppSec Orchestration/Correlation & DevSecOps Efficiency - Anita D'Amico, Patrick Carey - ASW #167

AppSec Orchestration/Correlation & DevSecOps Efficiency - Anita D'Amico, Patrick Carey - ASW #167

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes