Moving Towards Modern Vulnerability Management - Ed Bellis - ESW #178 | Enterprise Security Weekly (Video) Podcast

Moving Towards Modern Vulnerability Management - Ed Bellis - ESW #178: What are the practical ways to get that time to value in app security? How can we utilize devs in the process without creating massive SAST integration projects and training them on false positives and complex challenges. So just fitting into their... by Security Weekly Podcast Network (Video)

19 min listen

Time to Measure Security Improvement in AppSec - Ferruh Mavituna - ESW #178 by Enterprise Security Weekly (Video)

33 min listen

Time to Measure Security Improvement in AppSec - Ferruh Mavituna - ESW #178: What are the practical ways to get that time to value in app security? How can we utilize devs in the process without creating massive SAST integration projects and training them on false positives and complex challenges. So just fitting into their... by Security Weekly Podcast Network (Video)

33 min listen

Everybody's Looking For Something - ASW #152: This week, we welcome Manish Gupta, CEO and Co-Founder at ShiftLeft, to discuss Bringing Appsec to a Modern CI Pipeline! Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also... by Security Weekly Podcast Network (Audio)

71 min listen

Bringing AppSec to a Modern CI Pipeline - Manish Gupta - ASW #152: Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also needs to scale. We can't just shift responsibility left and assume that will be successful. So, how can an appsec team... by Security Weekly Podcast Network (Video)

39 min listen

Bringing AppSec to a Modern CI Pipeline - Manish Gupta - ASW #152: Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also needs to scale. We can't just shift responsibility left and assume that will be successful. So, how can an appsec team... by Application Security Weekly (Video)

39 min listen

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203: Appsec starts with the premise that we need to build secure code, but it also has to be able to recommend effective practices and tools that help developers. This also means appsec teams need to work with developers to create criteria for security... by Security Weekly Podcast Network (Video)

35 min listen

The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203: Appsec starts with the premise that we need to build secure code, but it also has to be able to recommend effective practices and tools that help developers. This also means appsec teams need to work with developers to create criteria for security... by Application Security Weekly (Video)

35 min listen

Effective Goal Setting and Tracking - ESW #182: Executing on a successful program and proving its efficacy is an impossibility for many security teams. Tune in as we discuss what steps you can take immediately to set more effective goals, track progress and share your success. You'll also have the... by Enterprise Security Weekly (Video)

36 min listen

Effective Goal Setting and Tracking - ESW #182: Executing on a successful program and proving its efficacy is an impossibility for many security teams. Tune in as we discuss what steps you can take immediately to set more effective goals, track progress and share your success. You'll also have the... by Security Weekly Podcast Network (Video)

36 min listen

Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Application Security Weekly (Video)

36 min listen

Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Security Weekly Podcast Network (Video)

36 min listen

ASW #206 - Manish Gupta: In our first segment, we are joined by Manish Gupt, the CEO and Co-Founder of ShiftLeft for A discussion of how the changes and advancements in static application security testing (SAST) and intelligent software composition analysis (SCA) have helped... by Security Weekly Podcast Network (Audio)

75 min listen

ASW #211 - Sonali Shah: Go releases their own curated vuln management resources, OSS-Fuzz finds command injection, Microsoft gets rid of Basic Auth in Exchange, NSA provides guidance on securing SDLC practices, reflections on pentesting, comments on e2e Shifting left... by Security Weekly Podcast Network (Audio)

78 min listen

Ep. 016, The Continuous Compliance Conundrum: The Continuous Compliance Conundrum by Underserved

34 min listen

Josh Grossman - building Appsec programs, bridging security and developer gaps: Youtube VOD: #appsec, #owasp, #ASVS, #joshGrossman, #informationsecurity, #SBOM, #supplychain, #podcast, #twitch, #brakesec, #securecoding, #Codeanalysis Questions and topics: 1. The background to the topic, why is it something that interests... by BrakeSec Education Podcast

76 min listen

The Benefits of SAST and SCA in Your IDE - Utsav Sanghani - ASW #101: Static application security testing (SAST) is critical for uncovering and eliminating issues in proprietary code. However, over 60% of the code in an average application today is composed of open source components. SAST isn't designed to find open... by Application Security Weekly (Video)

38 min listen

The Benefits of SAST and SCA in Your IDE - Utsav Sanghani - ASW #101: Static application security testing (SAST) is critical for uncovering and eliminating issues in proprietary code. However, over 60% of the code in an average application today is composed of open source components. SAST isn't designed to find open... by Security Weekly Podcast Network (Video)

38 min listen

Drive - ASW #165: This week, we welcome Manish Gupta, CEO and Co-Founder of ShiftLeft, to discuss Findings From the 2021 AppSec Shift Left Progress Report! Data from the ShiftLeft customer report shows that companies that have rebuilt their core testing processes... by Security Weekly Podcast Network (Audio)

74 min listen

Throwback Episode - Dev(Sec)Ops Scanning Challenges & Tips - ASW 170: We're aren't recording this holiday week, so enjoy this ASW throwback episode! Main host Mike Shema selected this episode to share as it's still relevant to the AppSec community today. This week, we welcome Nuno Loureiro, CEO at Probely,... by Security Weekly Podcast Network (Audio)

70 min listen

ASW #203 - Farshad Abasi: This week in the AppSec News: Apple introduces Lockdown Mode, PyPI hits 2FA trouble, cataloging cloud vulns, practical attacks on ML, NIST's post-quantum algorithms, & more! Appsec starts with the premise that we need to build secure code,... by Security Weekly Podcast Network (Audio)

70 min listen

Why DAST - from Project Management Perspective - Suha Akyuz - ESW #233: More than 96% of software development projects fail across the globe because too many businesses rely on the legacy DevOps process which allows us to run security testing right before going to production. Using the legacy DevOps can lead to a downfall... by Enterprise Security Weekly (Video)

31 min listen

Why DAST - from Project Management Perspective - Suha Akyuz - ESW #233: More than 96% of software development projects fail across the globe because too many businesses rely on the legacy DevOps process which allows us to run security testing right before going to production. Using the legacy DevOps can lead to a downfall... by Security Weekly Podcast Network (Video)

31 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Application Security Weekly (Video)

37 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Security Weekly Podcast Network (Video)

37 min listen

Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170: There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important to understand how to... by Application Security Weekly (Video)

38 min listen

Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170: There's a plenitude of ways to do Dev(Sec)Ops, and each organization or even each team uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important to understand how to... by Security Weekly Podcast Network (Video)

38 min listen

Cyber Monday - ASW #176: In today’s session Chris Wysopal will address a number of topics with Mike, including systemic risk in software development and how developers and security teams can work together to meet common goals and solve the speed vs. security dilemma.... by Security Weekly Podcast Network (Audio)

76 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Application Security Weekly (Video)

40 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Video)

40 min listen

Discover this podcast and so much more

Moving Towards Modern Vulnerability Management - Ed Bellis - ESW #178

Moving Towards Modern Vulnerability Management - Ed Bellis - ESW #178

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes