Unify DevOps and SecOps - ESW #166

FromEnterprise Security Weekly (Video)

Start listening View podcast show

Unify DevOps and SecOps - ESW #166

FromEnterprise Security Weekly (Video)

ratings:

Length:

30 minutes

Released:

Dec 19, 2019

Format:

Podcast episode

Description

DevSecOps is all the rage, but what does it really mean? How do you achieve the integration of Security into DevOps? This segment explores the people and process challenges of DevSecOps and where to integrate security seamlessly into the DevOps pipeline. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://wiki.securityweekly.com/ESWEpisode166

Released:

Dec 19, 2019

Format:

Podcast episode

Titles in the series (100)

A look at the current state of enterprise security solutions, including new products, features and industry reporting. Hosted by Paul Asadoorian and John Strand.

Skip carousel

Enterprise Security Weekly #17 - Security Training for Enterprises: Plus John and I discuss security training for the enterprise, what will work work best for you? Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode17 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
19 min listen
Enterprise Security Weekly #3 - Vulnerability Management: Do you know how to manage security vulnerability? Paul and John Strand educate on the topic of vulnerability management. They explain how to have control of patching and have mitigation control. Full Show Notes:... by Enterprise Security Weekly (Video)
39 min listen
Enterprise Security Weekly #12 - Detecting Rogue In The Enterprise: Integration in the enterprise security space, Cisco cuts its work force, and Pwnie Express Paul Paget. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode12 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
42 min listen
Enterprise Security Weekly #9 - Sniffing Each Others' Farts: This week in the news no excuses to go Phish yourself, a services vendor helps you identify risk, the #1 privileged identity management solution (According to some), and a huge blow to the Endpoint Security Agent market. And we'll talk about how to... by Enterprise Security Weekly (Video)
27 min listen
Enterprise Security Weekly #13 - News: Threat Intelligence gets funding, Security products in the cloud, incorporating virus totaling in your products, two factor authentication for voice-over IP. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode13 Visit... by Enterprise Security Weekly (Video)
29 min listen
Enterprise Security Weekly #6 - IDS/IPS: This week is, well, rough, ServiceNow buys threat intelligence company, memory scanning in the hypervisor, and next-generation network segmentation and NAC, and John and I discuss the evolution of IDS and IPS! Full Show Notes Here:... by Enterprise Security Weekly (Video)
39 min listen
Enterprise Security Weekly #21 - Using Bro In The Enterprise: Bro is a fantastic open-source tool, capable of analyzing packets at high speeds and big bandwidth. Learn how you can implement this open-source tool in your enterprise today, for the win! Full Show Notes:... by Enterprise Security Weekly (Video)
24 min listen
Enterprise Security Weekly #14 - News: Mcafee trademark dispute, customers want large security vendors?, do you trust your pin in the cloud, CyberArk struggles and embrace change! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode14 Visit... by Enterprise Security Weekly (Video)
31 min listen
Enterprise Security Weekly #8 - Securing "Air Gapped" Networks: Cisco makes an acquisition in cloud security, Palerra claims a first in the same space, Crowdstrike bundles prevent breaches? And Barracuda makes it easier to give them money for Next-Gen firewalls, all that and more so stay tuned! Full Show Notes:... by Enterprise Security Weekly (Video)
39 min listen
Enterprise Security Weekly #14 - Super Cyberman: Enterprise Security User Awareness Training and Paul dancing! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode14 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
24 min listen
Enterprise Security Weekly #11 - Documentation and Quotes: This week Logrhythm has a free network monitoring tool, SAP HANA, the hottest technology you didn't see at Blackhat, free anti-ransomware, Beyondtrust product announcement and traps. Visit http://securityweekly.com/esw for all the latest episodes!... by Enterprise Security Weekly (Video)
45 min listen
News - Enterprise Security Weekly #39: Cisco has new certs, 5 things to consider when building an SOC, CounterTack announces new data loss prevention measures, and more! Full Show Notes: Visit for all the latest episodes! by Enterprise Security Weekly (Video)
17 min listen
Enterprise Security Weekly #13 - To MSSP or not to MSSP: To MSSP or not to MSSP is the question. All that and more on Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode13 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
15 min listen
Enterprise Security Weekly #4 - Patch Management by Enterprise Security Weekly (Video)
35 min listen
Enterprise Security Weekly #26 - News: Ransomware’s effect on small business, another update from Ixia, Google Cloud customers have a new firewall offering, and much more in this week’s Enterprise News! Full Show Notes: Take the Security Weekly Survey: Visit for all the latest episodes! by Enterprise Security Weekly (Video)
28 min listen
Enterprise Security Weekly #10 - It's For Stupid People: User behavior analytics wins and fails, the top 10 emerging security vendors (according to some), and virtually testing your network, all that and more so stay tuned! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode10 by Enterprise Security Weekly (Video)
41 min listen
Enterprise Security Weekly #7 - Web Application Scanning: This week on Enterprise Security Weekly, tenable makes a strategic partnership to ease authenticated vulnerability scanning, avast announces a much faster antivirus engine, Risksense unveils cyber risk scoring that allows some other kind of scoring... by Enterprise Security Weekly (Video)
37 min listen
Enterprise Security Weekly #19 - Defending IoT Devices: Securing your data, and an account security solution, or ASS?, and securing IoT in the Enterprise! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode19 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
17 min listen
Enterprise Security Weekly #18 - News: Juniper's bug push into security, a big endpoint player goes IPO, and a firewall company enters the Anti-Virus game. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode18 Visit http://securityweekly.com/esw for all the latest... by Enterprise Security Weekly (Video)
26 min listen
Enterprise Security Weekly #16 - Privileged Alphabet Soup: Discuss privileged identity management with Paul and Santarcangelo. It is becoming more of trend. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode16 Visit http://securityweekly.com/esw for all the latest episodes! by Enterprise Security Weekly (Video)
23 min listen
Enterprise Security Weekly #22 - Incident Response: Enterprise Security Weekly Quick Guide To Building A Successful Incident Response Program with Paul and John. Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode22 Take the Security Weekly Survey: www.securityweekly.com/survey... by Enterprise Security Weekly (Video)
21 min listen
Enterprise Security Weekly #24 - Top 5 Defenses Against Penetration Testers (And Attackers): How can you defend yourself against attackers who are successfully exploiting you? Paul and John tell you how to pwn an organization and why you don’t necessarily need a vendor’s help in this week’s episode of Enterprise Security Weekly! Full... by Enterprise Security Weekly (Video)
20 min listen
Enterprise Security Weekly #25 - News: Juniper makes an acquisition, to IPO or not IPO, Ixia delivers an unprecedented visibility into virtual data center traffic, and much more in this week’s Enterprise News! Full Show Notes: Take the Security Weekly Survey: Visit for all the latest... by Enterprise Security Weekly (Video)
22 min listen
Enterprise Security Weekly #5 - "SEIM": "Cyber Deception" comes to Defcon and IoT, Cisco makes a push for Voice over WiFi, Sumo Logic monitors your Lambdas, and identity management integrates with SEIM? All that and more so stay tuned! Full Show... by Enterprise Security Weekly (Video)
40 min listen
Enterprise Security Weekly #15 - News: Microsoft partners with Ping, CyberArk gets a new patent, yet even more behavior based endpoint protection, Intel sells Mcafee, teaming up with MSPs, and embracing change in the cloud. Full Show Notes:... by Enterprise Security Weekly (Video)
41 min listen
Enterprise Security Weekly #18 - Darkweb Monitoring: Darkweb monitoring, is it really worth it and how can it help your enterprise? Find out on this edition of Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode18 Visit http://securityweekly.com/esw for... by Enterprise Security Weekly (Video)
17 min listen
Enterprise Security Weekly #19 - Discussion: Combining network and endpoint analysis for the win, password management with endpoint security, deception and winning? Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode19 Visit http://securityweekly.com/esw for all the latest... by Enterprise Security Weekly (Video)
27 min listen
Enterprise Security Weekly #29 - Zane Lackey, Signal Sciences: Zane Lackey is the Founder and Chief Security Officer of Signal Sciences. Prior to becoming a vendor, Zane was the Director of Security Engineering at Etsy and a Senior Security Consultant at iSEC Partners. Full Show Notes: Visit for all the latest... by Enterprise Security Weekly (Video)
33 min listen
Enterprise Security Weekly #17 - News: A behavior analytics company has a new release, endpoint security for vulnerabilities and threats, outsource your threat hunting, get with the flow on your network, and waiting in the wings to get bought. Full Show Notes:... by Enterprise Security Weekly (Video)
31 min listen
Enterprise Security Weekly #20 - Multi-Factor Authentication: Should we use Multi-factor Authentication for our Enterprise? Find out whether you should have a 2FA or not, here on Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode20 Visit... by Enterprise Security Weekly (Video)
21 min listen

More Episodes from Enterprise Security Weekly (Video)

Skip carousel

RSA Conference, Verizon DBIR, funding, reports, partnerships and more - ESW #360: It's the week before RSA and the news is PACKED. Everyone is trying to get their RSA announcements out all at once. We've got announcements about funding, acquisitions, partnerships, new companies, new products, new features... To make things MORE... by Enterprise Security Weekly (Video)
67 min listen
Preparation: The Less Shiny Side of Incident Response - Joe Gross - ESW #360: It's the most boring part of incident response. Skip it at your peril, however. In this interview, we'll talk to Joe Gross about why preparing for incident response is so important. There's SO MUCH to do, we'll spend some time breaking down the... by Enterprise Security Weekly (Video)
51 min listen
Threat Modeling and Understanding Inherent Threats - Adam Shostack - ESW #359: This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the... by Enterprise Security Weekly (Video)
45 min listen
How GenAI Can Improve SecOps - Ely Kahn - ESW #359: We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some... by Enterprise Security Weekly (Video)
30 min listen
Autonomous - I don't think that word means what you think it means - ESW #359: A clear pattern with startups getting funding this week are "autonomous" products and features. Automated detection engineering Autonomously map and predict malicious infrastructure ..."helps your workforce resolve their own security issues... by Enterprise Security Weekly (Video)
44 min listen
Crazy money and crazy outcomes - cybersecurity acquisitions in all shapes and sizes - ESW #358: This week, Adrian and Tyler discuss some crazy rumors - is it really possible that a cloud security startup valued at over $8 billion in November 2021 just got bought for $200 million??? Some healthy funding for Cyera and Cohesity ($300m and $150m,... by Enterprise Security Weekly (Video)
66 min listen
From Hackers to Streakers - How Counterintelligence Teams are Protecting the NFL - Joe McMann - ESW #358: Protecting a normal enterprise environment is already difficult. What must it be like protecting a sports team? From the stadium to merch sales to protecting team strategies and even the players - securing an professional sports team and its brand is... by Enterprise Security Weekly (Video)
41 min listen
The AI-est news segment ever, now with even more AI! - ESW #357: This week, Tyler and Adrian discuss Cyera's $300M Series C, which lands them a $1.4B valuation! But is that still a unicorn? Aileen Lee of Cowboy Ventures, who coined the term back in 2013, recently wrote a piece celebrating the 10th anniversary of... by Enterprise Security Weekly (Video)
67 min listen
Understanding KillNet and Recent Waves of DDoS Attacks - Michael Smith - ESW #357: In the days when Mirai emerged and took down DynDNS, along with what seemed like half the Internet, DDoS was as active a topic in the headlines as it was behind the scenes (). We don't hear about DDoS attacks as much anymore. What happened? Well, they... by Enterprise Security Weekly (Video)
36 min listen
Have you heard about AI? Lots of AI news. Also, RSA conference, and RooBadges! - ESW #356: As we near RSA conference season, tons of security startups are coming out of stealth! The RSA Innovation Sandbox has also announced the top 10 finalists, also highlighting early stage startups that will be at the show. In this week's news segment, ... by Enterprise Security Weekly (Video)
65 min listen
Getting Vulnerability Management Back on the Rails - Patrick Garrity - ESW #356: NVD checked out, then they came back? Maybe? Should the xz backdoor be treated as a vulnerability? Is scan-driven vulnerability management obsolete when it comes to alerting on emerging threats? What were some of the takeaways from the first-ever... by Enterprise Security Weekly (Video)
52 min listen
Multi-Layered Defense Platforms and other terms we found in security press releases - ESW #355: This week, in the enterprise security news: Early stage funding is all the rage AI startups continue to pop out of stealth The buyer's market continues with more interesting acquisitions Purpose-built large language models for security Benchmarking... by Enterprise Security Weekly (Video)
56 min listen
Why cyber hygiene requires curious talent - Clea Ostendorf - ESW #355: Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed... by Enterprise Security Weekly (Video)
49 min listen
Top 5 Myths About API Security and What to Do Instead - Robert Dickinson - ESW #354: While awareness and attention towards cybersecurity are on the rise, some popular and persistent myths about cybersecurity have almost become threats themselves. API security requires a modern understanding of the threat landscape, with the context... by Enterprise Security Weekly (Video)
49 min listen
Lots Of Funding News, Airbus Says No, and Cato Networks Going IPO? - ESW #354: In the enterprise security news, Lots of funding news, including: - Nozomi Networks Raises $100 Million to Expand Industrial Cybersecurity Business - BigID Raises $60 Million at $1 Billion Valuation - J.P. Morgan Growth Leads $39 Million Investment in... by Enterprise Security Weekly (Video)
56 min listen
Addressing Identity-Related Threats in 2024 - Rod Simmons - ESW #353: In this interview, we talk to Rod Simmons, the VP of Product Strategy at Omada. We'll discuss the complex topic of securing identities against ever growing threats. We'll discuss challenges like unnecessary access, accounts with too many permissions,... by Enterprise Security Weekly (Video)
49 min listen
Will AI allow us to finally scale vuln mgmt and threat detection? - ESW #353: We don't cover a lot of stories in this week's episode, but we go deep on a few important ones. I'm biased, but I think it's a good one, especially having Darwin's input and encyclopedic knowledge available to us. Also in this week's news: ... by Enterprise Security Weekly (Video)
69 min listen
What can we do today to prevent tomorrow's breach? - Michael Mumcuoglu - ESW #352: Defenders spend a lot of time and money procuring and implementing security controls. At the heart of SecOps and the SOC are technologies like XDR, SIEM, and SOAR. How do we know these technologies are going to detect or prevent attacks? Wait for the... by Enterprise Security Weekly (Video)
47 min listen
Early stage startup M&A on fire, funding healthy, and attackers are like lawyers? - ESW #352: In the enterprise security news, Axonius raises $200M and is doing $100M ARR! Claroty raises $100M and is doing $100M ARR! Crowdstrike picks up DSPM with Flow Security CyCode picks up Bearer Are attackers like lawyers? How a bank failed (with no help... by Enterprise Security Weekly (Video)
60 min listen
Hacktivism Unveiled: Insights into the Footprints of Hacktivists - Pascal Geenens - ESW #351: Pascal Geenens from Radware joins us to discuss the latest research findings relating to hacktivists an other actors using volumetric and other network-based attacks. We'll discuss everything from the current state of DDoS attacks to use in the... by Enterprise Security Weekly (Video)
51 min listen
Funding goes quiet while M&A makes some noise! - ESW #351: In this week's news segment, we discuss the lack of funding announcements, and the potential effect RSA could have on the timing of all sorts of press releases. We also discuss 1Password's potential future with its sizable customer base and the $620M... by Enterprise Security Weekly (Video)
68 min listen
Threat Intelligence & Threat Hunting - Chris Cochran - ESW Vault: Check out this interview from the ESW Vault, hand picked by main host Adrian Sanabria! This segment was originally published on September 22, 2021. Chris will discuss the relevance of intelligence and threat hunting today and how they work together.... by Enterprise Security Weekly (Video)
22 min listen
Pretending to be Batman, self-destructing USB drives, and controlling your dreams - ESW #350: This is almost a special episode on crazy new products. For the first half of the show, we discuss startup funding, market forces, acquisitions - stuff we usually discuss. Then we get into all the crazy new AI and non-AI products being announced and... by Enterprise Security Weekly (Video)
68 min listen
Material: cybersecurity word of the year, thanks to the SEC - Amer Deeba - ESW #350: In this segment, featuring guest Amer Deeba, we'll explore how the SEC's new breach reporting rules will affect companies. We've got a ton of questions: What behavior has to change? What additional preparation needs to take place? How does this rule... by Enterprise Security Weekly (Video)
46 min listen
Fake IDs threaten ID verification services, PANW hits $100B valuation, and other news - ESW #349: This week, we discussed how a quick (minutes) and cheap ($15 a pop) fake ID service creates VERY convincing IDs that are possibly good enough to fool ID verification services, HR, and a load of other scenarios where it's common to share images of an... by Enterprise Security Weekly (Video)
54 min listen
Zero-Trust is Meaningless if Your Cryptography is Flakey - Vincent Berk - ESW #349: Legacy systems are riddled with outdated and unreliable cryptographic standards. So much so that recent proprietary research found 61 percent of the traffic was unencrypted, and up to 80% of encrypted network traffic has some defeatable flaw in its... by Enterprise Security Weekly (Video)
46 min listen
The Internet of Shit, AI Funding, Market Struggles, The Cyber Why, and when to Quit - ESW #348: In this week's Enterprise Security News, Adrian, Tyler, and Katie discuss: 1. Tons of funding! 2. A notable acquisition! 3. The line is blurring between services and product firms 4. Apparently IronNet isn’t dead? 5. The toxicity of Hero culture in... by Enterprise Security Weekly (Video)
59 min listen

Related podcast episodes

Skip carousel

Unify DevOps and SecOps - ESW #166: DevSecOps is all the rage, but what does it really mean? How do you achieve the integration of Security into DevOps? This segment explores the people and process challenges of DevSecOps and where to integrate security seamlessly into the DevOps... by Security Weekly Podcast Network (Video)
30 min listen
Enhancing Software Security with DevSecOps by Continuous improvement
8 min listen
Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170: There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important to understand how to... by Application Security Weekly (Video)
38 min listen
Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170: There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important to understand how to... by Security Weekly Podcast Network (Video)
38 min listen
SWVHSC: How Does Sec Live In A DevOps World? - Mike Rothman - ASW #117: As you go full DevSecOps, where does that leave security operations? Who makes changes that are required? How do you empower (or deputize) app folks or ops folks (DevOps) to make those operational changes? What kind of tooling is going to meet the... by Application Security Weekly (Video)
34 min listen
SWVHSC: How Does Sec Live In A DevOps World? - Mike Rothman - ASW #117: As you go full DevSecOps, where does that leave security operations? Who makes changes that are required? How do you empower (or deputize) app folks or ops folks (DevOps) to make those operational changes? What kind of tooling is going to meet the... by Security Weekly Podcast Network (Video)
34 min listen
Securing Software Supply Chains - Application Security Weekly #61: This week, Derek Weeks joins us to talk about DevSecOps and Securing Software Supply Chains. Derek is the VP and DevOps Advocate at Sonatype. Derek is the world's foremost researcher on the topic of DevSecOps and securing software supply chains. Full... by Application Security Weekly (Video)
42 min listen
Securing Software Supply Chains - Application Security Weekly #61: This week, Derek Weeks joins us to talk about DevSecOps and Securing Software Supply Chains. Derek is the VP and DevOps Advocate at Sonatype. Derek is the world's foremost researcher on the topic of DevSecOps and securing software supply chains. Full... by Security Weekly Podcast Network (Video)
42 min listen
DevSecOps or SecDevOps with Wabbi's Brittney Greenfield: DevSecOps vs. SecDevOps vs. DevOpsSec: Is there really a difference in these secure DevOps terms? We all agree we need to not only secure DevOps but we want secure software to pop out the other side of our ops pipelines. Folks often have 'security teams' that are separate...how important is it to get not just a segment in the DevOps pipeline but really integrated end to end? Scott chats with Wabbi's Brittney Greenfield about the future of DevOps+Security. by Hanselminutes with Scott Hanselman
32 min listen
How to Build DevSecOps Pipeline as Code with Hasan Yasar: Last week, I shared a session from a previous Automation Guild, but this week, I'd like to share a session from our previous SecureGuild. So here is a presentation by Hasan Yasar on How to build a DevSecOps Pipeline as Code! You've heard the hype and... by TestGuild Devops Toolchain Podcast
34 min listen
Highly Technical - ASW #170: This week, we welcome Nuno Loureiro, CEO at Probely, and Tiago Mendo, CTO at Probely, to talk about Dev(Sec)Ops Scanning Challenges & Tips! There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different... by Security Weekly Podcast Network (Audio)
76 min listen
Shifting Right: What Security Engineers Can Learn From DevSecOps - Leif Dreizler - ASW #146: The security industry generally agrees on the value of enabling developers in an agile environment—although we don't agree on what to call it… “Shifting Left,” “Creating a Paved Path,” “DevSecOps.” Regardless of the name, we tend to... by Security Weekly Podcast Network (Video)
40 min listen
Shifting Right: What Security Engineers Can Learn From DevSecOps - Leif Dreizler - ASW #146: The security industry generally agrees on the value of enabling developers in an agile environment—although we don't agree on what to call it… “Shifting Left,” “Creating a Paved Path,” “DevSecOps.” Regardless of the name, we tend to... by Application Security Weekly (Video)
40 min listen
Diving Into DevSecOps with John Willis of Red Hat by Dev Interrupted
30 min listen
Building Security Into the DevOps Lifecycle - Sumedh Thakar - PSW #666: DevOps has gained momentum over the years as its methods have been used by teams worldwide to accelerate application delivery. But where we continue to struggle is in integrating security into this workflow. In this discussion, Sumedh Thakar,... by Security Weekly Podcast Network (Video)
59 min listen
Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Security Weekly Podcast Network (Video)
37 min listen
Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Application Security Weekly (Video)
37 min listen
DevSecOps - Making It Real - Mike Rothman - ASW #162: DevSecOps is an aspirational vision for many teams. With a number of macro changes occurring in modern application development, this segment will explore what tangible, practical things can be done today by security teams that add immediate value.... by Security Weekly Podcast Network (Video)
33 min listen
DevSecOps - Making It Real - Mike Rothman - ASW #162: DevSecOps is an aspirational vision for many teams. With a number of macro changes occurring in modern application development, this segment will explore what tangible, practical things can be done today by security teams that add immediate value.... by Application Security Weekly (Video)
33 min listen
Security By Design - ASW #135: A premise of adding security to DevOps is we can "shift left" AppSec responsibilities, one of which is building apps so they're secure by design. Yet what resources does the AppSec community provide for this approach to design? We take a look at the... by Security Weekly Podcast Network (Video)
36 min listen
Security By Design - ASW #135: A premise of adding security to DevOps is we can "shift left" AppSec responsibilities, one of which is building apps so they're secure by design. Yet what resources does the AppSec community provide for this approach to design? We take a look at the... by Application Security Weekly (Video)
36 min listen
Throwback Episode - Dev(Sec)Ops Scanning Challenges & Tips - ASW 170: We're aren't recording this holiday week, so enjoy this ASW throwback episode! Main host Mike Shema selected this episode to share as it's still relevant to the AppSec community today. This week, we welcome Nuno Loureiro, CEO at Probely,... by Security Weekly Podcast Network (Audio)
70 min listen
DevSecOps: All links and images for this episode can be found on CISO Series () We know that security plays a role in DevOps, but we've been having a hard time inserting ourselves in the conversation and in the process. How can we get the two sides of developers... by Defense in Depth
27 min listen
How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107 by Application Security Weekly (Video)
37 min listen
How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107: DevOps and Agile IT practices have been around for a while. However, security teams are just now catching up. We will discuss how security teams can stop being “showstoppers” for the developers and actually work with them, not against them. Focus... by Security Weekly Podcast Network (Video)
37 min listen
Challenges Implementing & Sustaining DevSecOps with Hasan Yasar: How do you define DevSecOps? Despite what some will lead you to believe, DevOps is not just a set of tools. In Hasan Yasar Technical Director of Continuous Deployment of Capability group in Software Engineering Institute, CMU shares his thought... by TestGuild Security Testing Podcast
31 min listen
Why DAST - from Project Management Perspective - Suha Akyuz - ESW #233: More than 96% of software development projects fail across the globe because too many businesses rely on the legacy DevOps process which allows us to run security testing right before going to production. Using the legacy DevOps can lead to a downfall... by Security Weekly Podcast Network (Video)
31 min listen
Why DAST - from Project Management Perspective - Suha Akyuz - ESW #233: More than 96% of software development projects fail across the globe because too many businesses rely on the legacy DevOps process which allows us to run security testing right before going to production. Using the legacy DevOps can lead to a downfall... by Enterprise Security Weekly (Video)
31 min listen
Broadening What We Call AppSec - Christien Rioux - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on January 10, 2022. There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take... by Security Weekly Podcast Network (Video)
36 min listen
Broadening What We Call AppSec - Christien Rioux - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on January 10, 2022. There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take... by Security Weekly Podcast Network (Audio)
36 min listen

Discover this podcast and so much more

Unify DevOps and SecOps - ESW #166

Unify DevOps and SecOps - ESW #166

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes