The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203 | Security Weekly Podcast Network (Video) Podcast

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203: Appsec starts with the premise that we need to build secure code, but it also has to be able to recommend effective practices and tools that help developers. This also means appsec teams need to work with developers to create criteria for security... by Application Security Weekly (Video)

35 min listen

ASW #203 - Farshad Abasi: This week in the AppSec News: Apple introduces Lockdown Mode, PyPI hits 2FA trouble, cataloging cloud vulns, practical attacks on ML, NIST's post-quantum algorithms, & more! Appsec starts with the premise that we need to build secure code,... by Security Weekly Podcast Network (Audio)

70 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Application Security Weekly (Video)

40 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Video)

40 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Application Security Weekly (Video)

37 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Security Weekly Podcast Network (Video)

37 min listen

Time to Measure Security Improvement in AppSec - Ferruh Mavituna - ESW #178 by Enterprise Security Weekly (Video)

33 min listen

Time to Measure Security Improvement in AppSec - Ferruh Mavituna - ESW #178: What are the practical ways to get that time to value in app security? How can we utilize devs in the process without creating massive SAST integration projects and training them on false positives and complex challenges. So just fitting into their... by Security Weekly Podcast Network (Video)

33 min listen

Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Application Security Weekly (Video)

36 min listen

Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Security Weekly Podcast Network (Video)

36 min listen

How to Build a Developer-First Application Security Program - Harshil Parikh - ASW #190: Developers ignore security issues. But can we really blame them? After all, security folks bombard them with an endless stream of issues that need to be addressed with no way for them to separate what’s actually critical from all the noise, all... by Application Security Weekly (Video)

36 min listen

How to Build a Developer-First Application Security Program - Harshil Parikh - ASW #190: Developers ignore security issues. But can we really blame them? After all, security folks bombard them with an endless stream of issues that need to be addressed with no way for them to separate what’s actually critical from all the noise, all... by Security Weekly Podcast Network (Video)

36 min listen

Cloud Native Security Platforms - John Morello - ASW #143: Modern appsec demonstrates the importance of a cloud native strategy for enterprise security and how much that strategy must integrate with DevOps tools and workflows. Security solutions need to come from a cohesive platform that addresses the... by Security Weekly Podcast Network (Video)

34 min listen

Cloud Native Security Platforms - John Morello - ASW #143: Modern appsec demonstrates the importance of a cloud native strategy for enterprise security and how much that strategy must integrate with DevOps tools and workflows. Security solutions need to come from a cohesive platform that addresses the... by Application Security Weekly (Video)

34 min listen

Building Security Into the DevOps Lifecycle - Sumedh Thakar - PSW #666: DevOps has gained momentum over the years as its methods have been used by teams worldwide to accelerate application delivery. But where we continue to struggle is in integrating security into this workflow. In this discussion, Sumedh Thakar,... by Security Weekly Podcast Network (Video)

59 min listen

The Psychology of Training - Matias Madou - ASW #198: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. We'll talk about how the definition of secure coding varies among developers and appsec teams, why it's important to... by Security Weekly Podcast Network (Video)

37 min listen

The Psychology of Training - Matias Madou - ASW #198: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. We'll talk about how the definition of secure coding varies among developers and appsec teams, why it's important to... by Application Security Weekly (Video)

37 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Application Security Weekly (Video)

40 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Video)

40 min listen

ASW #190 - Harshil Parikh: Developers ignore security issues. But can we really blame them? After all, security folks bombard them with an endless stream of issues that need to be addressed with no way for them to separate what’s actually critical from all the noise, all... by Security Weekly Podcast Network (Audio)

78 min listen

Show, Don’t Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Application Security Weekly (Video)

43 min listen

Moving Towards Modern Vulnerability Management - Ed Bellis - ESW #178: What are the practical ways to get that time to value in app security? How can we utilize devs in the process without creating massive SAST integration projects and training them on false positives and complex challenges. So just fitting into their... by Enterprise Security Weekly (Video)

19 min listen

Moving Towards Modern Vulnerability Management - Ed Bellis - ESW #178: What are the practical ways to get that time to value in app security? How can we utilize devs in the process without creating massive SAST integration projects and training them on false positives and complex challenges. So just fitting into their... by Security Weekly Podcast Network (Video)

19 min listen

What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241: What happens to an app's security after six months? What about a year or two years? A Secure SDLC needs to maintain security throughout an app's lifetime, but too often the rate of new flaws can outpace the rate of new code within an app. Appsec teams... by Security Weekly Podcast Network (Video)

41 min listen

What to Do When the Honeymoon Period Ends - Chris Eng - ASW #241: What happens to an app's security after six months? What about a year or two years? A Secure SDLC needs to maintain security throughout an app's lifetime, but too often the rate of new flaws can outpace the rate of new code within an app. Appsec teams... by Application Security Weekly (Video)

41 min listen

Show, Don’t Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213: Applications are the most frequent external attack vector for companies. However, application security can improve only if developers either code securely or remediate existing security flaws — unfortunately, many don’t receive training with... by Security Weekly Podcast Network (Video)

43 min listen

Bringing AppSec to a Modern CI Pipeline - Manish Gupta - ASW #152: Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also needs to scale. We can't just shift responsibility left and assume that will be successful. So, how can an appsec team... by Application Security Weekly (Video)

39 min listen

Bringing AppSec to a Modern CI Pipeline - Manish Gupta - ASW #152: Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also needs to scale. We can't just shift responsibility left and assume that will be successful. So, how can an appsec team... by Security Weekly Podcast Network (Video)

39 min listen

Navigating the Complexities of Development to Create Secure APIs with Kristen Bell - Kristen Bell - ASW #248: Appsec teams and developers must both understand the consequences of what they're doing when building APIs. Appsec teams need to push for collaboration and help implement tools that augment the development process. Dev teams need to wrangle complex... by Security Weekly Podcast Network (Video)

38 min listen

Navigating the Complexities of Development to Create Secure APIs with Kristen Bell - Kristen Bell - ASW #248: Appsec teams and developers must both understand the consequences of what they're doing when building APIs. Appsec teams need to push for collaboration and help implement tools that augment the development process. Dev teams need to wrangle complex... by Application Security Weekly (Video)

38 min listen

Discover this podcast and so much more

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes