Software Trust & Adversaries - Shannon Lietz - ASW #246 | Security Weekly Podcast Network (Video) Podcast

Software Trust & Adversaries - Shannon Lietz - ASW #246: Infosec is still figuring out useful metrics, how to talk about risk, and how to make resilience more relevant. Shannon talks about a new community effort to measure software trust. She also covers threat modeling and adversary management as steps... by Application Security Weekly (Video)

35 min listen

Software Trust & Adversaries, Developer-Focused Security - Shannon Lietz, Melinda Marks - ASW #246: Infosec is still figuring out useful metrics, how to talk about risk, and how to make resilience more relevant. Shannon talks about a new community effort to measure software trust. She also covers threat modeling and adversary management as steps... by Security Weekly Podcast Network (Audio)

77 min listen

Prepping for Security Incidents, Automated Validation & No-Code Automation Revolution - Amitai Ratzon, Jon Check, Thomas Kinsella - ESW #319: The reality is no organization is insusceptible to a breach – and security teams, alongside the C-suite, should prepare now to make the response more seamless once a crisis does happen. Based on his experience working 1:1 with security leaders in... by Security Weekly Podcast Network (Video)

44 min listen

Prepping for Security Incidents, Automated Validation & No-Code Automation Revolution - Amitai Ratzon, Jon Check, Thomas Kinsella - ESW #319: The reality is no organization is insusceptible to a breach – and security teams, alongside the C-suite, should prepare now to make the response more seamless once a crisis does happen. Based on his experience working 1:1 with security leaders in... by Enterprise Security Weekly (Video)

44 min listen

Solving Systemic Risk in Software Development - Chris Wysopal - ASW #176: In today’s session Chris Wysopal will address a number of topics with Mike, including systemic risk in software development and how developers and security teams can work together to meet common goals and solve the speed vs. security dilemma.... by Security Weekly Podcast Network (Video)

37 min listen

Solving Systemic Risk in Software Development - Chris Wysopal - ASW #176: In today’s session Chris Wysopal will address a number of topics with Mike, including systemic risk in software development and how developers and security teams can work together to meet common goals and solve the speed vs. security dilemma.... by Application Security Weekly (Video)

37 min listen

Threat Detection: The Network Scavenger Hunt - Ward Cobleigh - ESW #161: Ward Cobleigh is the Sr. Product Manager at VIAVI Solutions. There's an abundance of potential data sources that can be found within you network. Where should you look? Which data sources offer unique perspectives and value? How can you use these data... by Security Weekly Podcast Network (Video)

29 min listen

Threat Detection: The Network Scavenger Hunt - Ward Cobleigh - ESW #161: Ward Cobleigh is the Sr. Product Manager at VIAVI Solutions. There's an abundance of potential data sources that can be found within you network. Where should you look? Which data sources offer unique perspectives and value? How can you use these data... by Enterprise Security Weekly (Video)

29 min listen

How Do We Raise the Floor for Software Quality? - Brian Behlendorf - PSW #770: Open source is the bedrock of most of the world’s software today, so how to raise the floor on software quality across the industry? First, we need better tools to measure the trustworthiness of code based on objective measures, processes that... by Security Weekly Podcast Network (Video)

58 min listen

ESW #306 - Space Rogue, Pablo Zurro, Dr. Inka Karppinen: Organizations today operate under the constant looming threat of cyber attacks. While reactive cybersecurity measures will help organizations respond to past and present threats, offensive measures are the only chance to get ahead of attackers and... by Security Weekly Podcast Network (Audio)

139 min listen

ASW #239 - Patrick Vandenberg, Karl Triebes, Francesco Cipollone: Application security is messy and is getting messier. Modern application security teams are struggling to identify what's more important to fix. Cloud security and application security is getting squeezed all together. Modern vulnerability maturity... by Security Weekly Podcast Network (Audio)

81 min listen

Scaling Your Threat Modeling Program: Understanding product security risk starts before a single code line is written. Teams can discover threats to the architecture of a system early in the development life cycle with Threat Modeling. While it’s not a new concept, how do we transform tr... by ISACA Podcast

19 min listen

Under Pressure - Building Security Into Application Development - Patrick Carey - ESW #196: A recent study by Enterprise Strategy Group, commissioned by Synopsys, revealed that nearly half of the cybersecurity and development professionals surveyed indicate that their organization knowingly pushes vulnerable code into production due to time... by Security Weekly Podcast Network (Video)

32 min listen

Under Pressure - Building Security Into Application Development - Patrick Carey - ESW #196: A recent study by Enterprise Strategy Group, commissioned by Synopsys, revealed that nearly half of the cybersecurity and development professionals surveyed indicate that their organization knowingly pushes vulnerable code into production due to time... by Enterprise Security Weekly (Video)

32 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Video)

40 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Application Security Weekly (Video)

40 min listen

Pragmatic Approaches to Cybersecurity Maturity, Part 1 - SCW #40: There are a lot of ways to measure/assess the level of organizational maturity of security programs. But, how do you mature your organization? We will discuss practical steps, like prioritizing the to-do list, the balance between people, process, and... by Security Weekly Podcast Network (Video)

31 min listen

Securing The Enterprise Software Supply Chain - Harry Sverdlove - PSW #678: SolarWinds is just the latest example of how the enterprise software supply chain, when compromised, can be used successfully by attackers. These coordinated and well-managed attacks prey on trust, so how can we trust our enterprise software? ... by Security Weekly Podcast Network (Video)

58 min listen

2020-023-James Nelson from Illumio, cyber resilence, business continuity: James Nelson, VP of Infosec, Illumio How has COVID-19 changed cybersecurity? Why is cyber resilience especially important now? What are the most important steps to ensure cyber-resiliency? How do you talk to business leaders about investing in... by BrakeSec Education Podcast

49 min listen

Automated Vulnerability Remediation - The Good, the Bad and the Ugly - PSW #679: The way we identify, prioritize, and mitigate software vulnerabilities was built in the reverse order. Why did it happen? Could a new remediation strategy finally form an alliance between IT and security teams? This segment is sponsored by... by Security Weekly Podcast Network (Video)

48 min listen

Developing an Effective AppSec Security Program - Brendon Macaraeg - BSW #151: Brendon Macaraeg is the Sr. Director of Product Marketing of Signal Sciences. Focus on the people, processes and tools a dev team needs to put an effective security program in place. Discuss how to improve listener's current program and tooling to... by Security Weekly Podcast Network (Video)

35 min listen

ESW #309 - Tal Morgenstern, Casey Smith: The CI/CD pipeline is the backbone of the software development process, so it's critical to ensure you are meeting and exceeding the most critical security measures. Throughout this podcast, Tal Morgenstern, Co-founder and CSO of Vulcan Cyber, will... by Security Weekly Podcast Network (Audio)

145 min listen

Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283: Companies deploy tools (usually lots of tools) to address different threats to supply chain security. Melinda Marks shares some of the chaos those companies still face when trying to prioritize investments, measure risk, and scale their solutions to... by Security Weekly Podcast Network (Audio)

80 min listen

ESW #319 - Amitai Ratzon, Steve Ragan, Deepika Chauhan, Thomas Kinsella, Jon Check: On this edition of the ESW news, we're all over the place! Funding and acquisitions are a little sad right now, but AI and TikTok bans raise our spirits. The hosts are split on feelings about the new .zip gTLD, there's a new standard for scoring an... by Security Weekly Podcast Network (Audio)

145 min listen

Findings From the 2021 AppSec Shift Left Progress Report - Manish Gupta - ASW #165: Data from the ShiftLeft customer report shows that companies that have rebuilt their core testing processes around faster and more accurate static analysis are able to release more secure code at scale, scan more frequently, fixes earlier in the... by Application Security Weekly (Video)

37 min listen

Findings From the 2021 AppSec Shift Left Progress Report - Manish Gupta - ASW #165: Data from the ShiftLeft customer report shows that companies that have rebuilt their core testing processes around faster and more accurate static analysis are able to release more secure code at scale, scan more frequently, fixes earlier in the... by Security Weekly Podcast Network (Video)

37 min listen

Black Hat Interviews - WhiteSource and Venafi - ASW #74: We interview Azi Cohen the Co-founder of WhiteSource. He will be talking about Application security has undergone a transition in recent years, as information security teams testing products before release became irrelevant, developers started playing... by Application Security Weekly (Video)

30 min listen

Black Hat Interviews - WhiteSource and Venafi - ASW #74: We interview Azi Cohen the Co-founder of WhiteSource. He will be talking about Application security has undergone a transition in recent years, as information security teams testing products before release became irrelevant, developers started playing... by Security Weekly Podcast Network (Video)

30 min listen

DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Security Weekly Podcast Network (Video)

41 min listen

DevSecOps Essentials - Keith Hoodlet - ASW #224: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - Visit ... by Application Security Weekly (Video)

41 min listen

Discover this podcast and so much more

Software Trust & Adversaries - Shannon Lietz - ASW #246

Software Trust & Adversaries - Shannon Lietz - ASW #246

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes