GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification - ASW #278

FromSecurity Weekly Podcast Network (Video)

Start listening View podcast show

GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification - ASW #278

FromSecurity Weekly Podcast Network (Video)

ratings:

Length:

33 minutes

Released:

Mar 26, 2024

Format:

Podcast episode

Description

The GoFetch side channel in Apple CPUs, OpenSSF's plan for secure software developer education, fuzzing vs. formal verification as a security strategy, hard problems in InfoSec (and AppSec), and more! Show Notes: https://securityweekly.com/asw-278

Released:

Mar 26, 2024

Format:

Podcast episode

Titles in the series (100)

Security news, interviews, how-to technical segments. For security professionals by security professionals. We Hack Naked.

Skip carousel

Tech Segment: Bro IDS: Bro is a passive, open-source network traffic analyzer and was originally developed by Vern Paxson, who continues to lead the project now jointly with a core team of researchers and developers at the International Computer Science Institute in... by Security Weekly Podcast Network (Video)
37 min listen
Interview with Schuyler Towne - Episode 338: Schuyler Towne is on a mission to recover as much information as possible about the lock-related patents that were lost to the patent office fire of 1836. His primary interest is in the history and the story of the creators of the lost locks, but his... by Security Weekly Podcast Network (Video)
21 min listen
DerbyCon Organizers and Stories - Episode 345: The last segment from episode 345 features Dave, Martin, Adrian and Nick, the DerbyCon organizers to talk about the upcoming third edition of their conference in Louisville. Find out how they planned it to be bigger and better this year! Plus, a... by Security Weekly Podcast Network (Video)
33 min listen
Interview with Whitfield Diffie - Episode 341: Dr. Diffie is a pioneer of public-key cryptography and was VP of Information Security and Cryptography at ICANN. He is author of Privacy on the Line: The Politics of Wiretapping and Encryption by Security Weekly Podcast Network (Video)
50 min listen
BruCon Matt - Episode 343: Matt is a long time volunteer of BruCon and is going to let us know all the great things in store for 2013. by Security Weekly Podcast Network (Video)
15 min listen
OWASP Top 10 (2013) with Dave Wichers: The OWASP Top Ten is an awareness document for web application security, representing broad consensus about the most critical web application security risks as determined by the OWASP community. The OWASP Top 10 is one of the earliest and longest... by Security Weekly Podcast Network (Video)
24 min listen
Interview with Bruce Potter and JP Bourget - Episode 335: We have JP Bourget and Bruce Potter on the show to announce their ball busting ride across the USA, CycleOverride . CycleOverride is planning a series of rides over the coming years that revolve around information security and fundraising for... by Security Weekly Podcast Network (Video)
15 min listen
Hack Naked TV Episode 59: In this episode we talk about pwnedlist and how many companies are compromised and don't even know it. We also talk about how one should not throw stones in glass houses. by Security Weekly Podcast Network (Video)
11 min listen
Hack naked TV 56ish: In this episode we talk about the importance of being able to detect insider threats. by Security Weekly Podcast Network (Video)
8 min listen
Interview with Matt Bergin - Episode 337: Matt "Level" Bergin, age twenty four, works for CORE Security as a Senior Security Consultant where his day job consists of discovering, exploiting, and mitigating vulnerabilities in their client’s network environments. Before joining... by Security Weekly Podcast Network (Video)
29 min listen
Tech Segment: Threat Analytics with Ty Miller - Episode 340: Ty Miller is CEO and Founder of Threat Intelligence , has had many TV appearances, radio interviews, print newspaper and magazine articles, and regular online commentary & BlackHat Trainings. Ty Miller's experience not only covers penetration... by Security Weekly Podcast Network (Video)
23 min listen
Interview with Phil Young - Episode 342: Philip Young, aka Soldier of Fortran, is a mainframe phreak! His love of mainframes goes back to when he watched Tron, wide eyed, for the first time. Though it would be decades until he actually got his hands on one he was always interested in their... by Security Weekly Podcast Network (Video)
37 min listen
Tech Segment: Honeyports - Episode 340: If you've seen one of mine, or John Strand's, presentations on offensive countermeasures, you know about Honeyports. If you've taken our class or read our book, you've seen this too! Just to recap: If you tell your host to listen... by Security Weekly Podcast Network (Video)
13 min listen
Drunken Security News - Episode 340: All things Black Hat, DefCon. Making $15,000 to $20,000 per hour. Hijacking a Prius. Vulnerable printers. More SCADA hacking. Hacking toilets. by Security Weekly Podcast Network (Video)
66 min listen
Interview with Troy Hunt - Episode 339: Troy is a Software architect and Microsoft MVP, you'll usually find him writing about security concepts and process improvement in software delivery on his blog. He also has a free e-book out "OWASP Top 10 for .NET developers" by Security Weekly Podcast Network (Video)
38 min listen
Interview with Onapsis - Episode 338: Selena Proctor, Alex Horan and Mariano Nunez join us from Onapsis. by Security Weekly Podcast Network (Video)
52 min listen
Tech Segment with Zach Cutlip - Episode 342: Zach will be going over how he does research on exploiting embedded systems and his exploit development framework bowcaster. Zachary Cutlip is a security researcher with Tactical Network Solutions, in Columbia, MD. At TNS, Zach develops exploitation... by Security Weekly Podcast Network (Video)
32 min listen
Drunken Security News - Episode 342: From the Bradley Manning sentencing to DDOSing your former employer, the guys at PSW cover all the interesting stories of the week. by Security Weekly Podcast Network (Video)
32 min listen
Interview with Ira Winkler - Episode 343: Ira Winkler, CISSP is President of Secure Mentem. Ira is one of the foremost experts in the human elements of cyber security and is known for the extensive espionage and social engineering simulations that he has conducted for Fortune 500 companies... by Security Weekly Podcast Network (Video)
33 min listen
Enumerating a Domain using ADSI in PowerShell: Carlos Perez is also known as @DarkOperator, He spends his time reverse engineering, and practicing PowerShell Kung-Fu. Known by his motto "Shell is only the Beginning". by Security Weekly Podcast Network (Video)
21 min listen
Interview with Kati Rodzon and Mike Murray: Kati Rodzon is the manager of Security Behavior Deisgn for MAD Security. Her last nine years have been spent studying psychology and ways to modify human behavior. From learning about the power of social pressure on groups, to how subtle changes in... by Security Weekly Podcast Network (Video)
36 min listen
Hack Naked TV Episode 57: In this episode we talk about Prism, M$, HIPAA and Panic!!! In the financial sector!! Links for this episode: http://tinyurl.com/HNTV-HIPAA-Costs http://tinyurl.com/HNTV-Financial-collapse http://tinyurl.com/HNTV-MS-NSA by Security Weekly Podcast Network (Video)
9 min listen
Interview with Rich Mogull - Episode 345: Rich has twenty years experience in information security, physical security, and risk management. He is the founder of Securosis and specializes in data security, application security, emerging security technologies, and security management. by Security Weekly Podcast Network (Video)
53 min listen
Tech Segment with Allison Nixon - Episode 341: Denying Service to DDOS Protection Services by Security Weekly Podcast Network (Video)
22 min listen
Tech Segment with Pete Finnigan - Episode 345: Pete Finnigan works as an independent Oracle security consultant for his own company PeteFinnigan.com Limited . Pete specializes in performing detailed Oracle security IT Health checks against Oracle databases using a detailed methodology developed by... by Security Weekly Podcast Network (Video)
17 min listen
Drunken Security News - Episode 343: You got Paul and Larry this week as they take you through all the fun that is hacking geolocators, Java 6, getting sudo on an OSX machine, and a great story from the pentesting field by Larry. Plus a whole lot more! by Security Weekly Podcast Network (Video)
34 min listen
Stories of the Week - Episode 348: Jack's rantapocalypse, popping penguins, the Yahoo bounty, Paul wants a new phone and the Blackhole kit guy goes down. We think. by Security Weekly Podcast Network (Video)
42 min listen
Interview with Richard Stiennon: Richard Stiennon, security expert and industry analyst, is known for shaking up the industry and providing actionable guidance to vendors and end users. He relaunched the security blog ThreatChaos.com and is the founder of IT-Harvest. by Security Weekly Podcast Network (Video)
49 min listen
Episode 350: SCADA Panel: SCADA systems are being attacked and making headlines. However, this is not news, or is it? There is a lot of new found "buzz" around attacking SCADA and defending SCADA. Technology has evolved and many systems are Internet connected and... by Security Weekly Podcast Network (Video)
53 min listen
Interview with Jaime Filson - Episode 347: Jaime enjoys long walks on the beach while his computer equipment is busy fuzzing software, cracking passwords, or spidering the internet. He's also the creator of the gitDigger project as well as staff of DEFCON's wireless village. by Security Weekly Podcast Network (Video)
18 min listen

More Episodes from Security Weekly Podcast Network (Video)

Skip carousel

Leveraging AI & The Role Identity Plays - BSW #350: AI is more than just a buzzword. Done right, AI can improve decision making and scale your identity security platform to manage every identity, human and machine, physical and digital. Learn about how Saviynt’s #1 Identity Security platform is... by Security Weekly Podcast Network (Video)
34 min listen
Inside the OWASP Top 10 for LLM Applications - Sandy Dunn - ASW #285: Everyone is interested in generative AIs and LLMs, and everyone is looking for use cases and apps to apply them to. Just as the early days of the web inspired the original OWASP Top 10 over 20 years ago, the experimentation and adoption of LLMs has... by Security Weekly Podcast Network (Video)
38 min listen
3000 Years Ago, Dell, Robocalls, PyPI, Cinterion, Cacti, Chat-GPT, Josh Marpet... - SWN #386: 3000 Years Ago, Dell, Robocalls, PyPI, Cinterion, Cacti, Chat-GPT, Windows, Josh Marpet, and more, on this Edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
37 min listen
The Enterprise Browser & AI in Securing Software and Supply Chains - Mike Fey, Josh Lemos - ASW #285: How companies are benefiting from the enterprise browser. It's not just security when talking about the enterprise browser. It's the marriage between security AND productivity. In this interview, Mike will provide real live case studies on how... by Security Weekly Podcast Network (Video)
29 min listen
Easy Passwords, BIG-IP, Ascension, Lockbit, Google, Poland, ZScaler, Aaran Leyland... - SWN #385: Easy Passwords, BIG-IP, Ascension, Lockbit, Google, Poland, ZScaler, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
37 min listen
Identity Resilience: The Next Frontier in Security - Ray Zadjmool - BSW #350: In today's enterprises, the Identity Access Management (IAM) System is the key to a business' critical operations. But that IAM environment is more vulnerable than most security executives realize. Segment Resources: This segment is sponsored by... by Security Weekly Podcast Network (Video)
27 min listen
Automated Pentesting, AI in SecOps, & AI-Powered Analytics - Jason Keirstead, Jay Mar-Tang, Anthony Aurigemma - ESW #361: Despite building up impressive security stacks in the Cloud, organizations are still struggling to keep their environments safe. Pentera recently introduced Pentera Cloud as the first tool to provide automated pentesting capabilities for cloud... by Security Weekly Podcast Network (Video)
45 min listen
Next Gen Threats, CTEM Essentials, & Proactive MDR - Randy Watkins, Paul Reid, Zaira Pirzada - ESW #361: Emerging threats are targeting organizations from seemingly every angle. This means security teams must expand their focus to secure as many domains as possible. OpenText is building on its holistic approach to cybersecurity with new innovations that... by Security Weekly Podcast Network (Video)
41 min listen
Phishing Attacks Increase, Network Transformation, & Unified SASE as a Service - Deepen Desai, Renuka Nadkarni, Tim Roddy - ESW #361: The landscape of phishing attacks continues to rapidly evolve. In 2023, Zscaler ThreatLabz observed a year-over-year increase of 58.2% in global phishing attempts. This surge was characterized by emerging schemes, including voice phishing, recruitment... by Security Weekly Podcast Network (Video)
49 min listen
Hacker Heroes - Jeremiah Grossman - PSW #828: Illuminating the Cybersecurity Path: A Conversation with Jeremiah Grossman Join us for a compelling episode featuring Jeremiah Grossman, a prominent figure in the cybersecurity landscape. As a recognized expert, Jeremiah has played a pivotal role in... by Security Weekly Podcast Network (Video)
60 min listen
Corporate Ransomware Deep Dive - Mikko Hypponen - PSW #828: In this RSAC 2024 South Stage Keynote, Mikko Hyppönen will look back at the past decade of ransomware evolution and explore how newer innovations, like AI, are shaping its future. Show Notes: by Security Weekly Podcast Network (Video)
56 min listen
Say Easy, Do Hard - Train How You Fight, Part 2 - BSW #349: Inspired by my co-host Jason Albuquerque, we dig into the hard part of our Say Easy, Do Hard segment. In part 2, we discuss how to train for a cyber instance. We'll cover the elements of a training program that will prepare you for responding to a... by Security Weekly Podcast Network (Video)
32 min listen
AI & Hype & Security (Oh My!) - Caleb Sima - ASW #284: A lot of AI security has nothing to do with AI -- things like data privacy, access controls, and identity are concerns for any new software and in many cases AI concerns look more like old-school API concerns. But...there are still important aspects... by Security Weekly Podcast Network (Video)
33 min listen
Hacking AI Bias with Human Techniques - Keith Hoodlet - ASW #284: We already have bug bounties for web apps so it was only a matter of time before we would have bounties for AI-related bugs. Keith Hoodlet shares his experience winning first place in the DOD's inaugural AI bias bounty program. He explains how his... by Security Weekly Podcast Network (Video)
32 min listen
Tetris, APT42, Kimsuky, Android, ChatRTX, MITRE, Computer Dating, Josh Marpet, More - SWN #384: Tetris, APT42, Kimsuky, Android, ChatRTX, MITRE, Computer Dating, Josh Marpet, and more, on this Edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
38 min listen
Say Easy, Do Hard - Train How You Fight, Part 1 - BSW #349: Inspired by my co-host Jason Albuquerque, this quarter's Say Easy, Do Hard segment is Train How You Fight. In part 1, we discuss the importance of training for a cyber incident. However, lots of organizations do not take it seriously, causing mistakes... by Security Weekly Podcast Network (Video)
28 min listen
Preparation: The Less Shiny Side of Incident Response - Joe Gross - ESW #360: It's the most boring part of incident response. Skip it at your peril, however. In this interview, we'll talk to Joe Gross about why preparing for incident response is so important. There's SO MUCH to do, we'll spend some time breaking down the... by Security Weekly Podcast Network (Video)
51 min listen
Weird Al, Docker, OT, Gitlab, Credit Monitoring, Dropbox, Cisco, AI, Aaran Leyland... - SWN #383: Weird Al, Docker, OT, Gitlab, Credit Monitoring, Dropbox, Cisco, AI, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
35 min listen
RSA Conference, Verizon DBIR, funding, reports, partnerships and more - ESW #360: It's the week before RSA and the news is PACKED. Everyone is trying to get their RSA announcements out all at once. We've got announcements about funding, acquisitions, partnerships, new companies, new products, new features... To make things MORE... by Security Weekly Podcast Network (Video)
67 min listen
Kicking Off With Crypto - PSW #827: The Security Weekly crew discusses some of the latest articles and research in cryptography and some background relevant subtopics including the race against quantum computing, key management, creating your own crypto, selecting the right crypto and... by Security Weekly Podcast Network (Video)
65 min listen
ChatGPT Writes Exploits - PSW #827: ChatGPT writes exploits, banning default and weak passwords, forget vulnerabilities just get rid of malware, IR blasting for fun and not profit, creating fake people, shattered dreams and passkey, and removing chips. Show Notes: by Security Weekly Podcast Network (Video)
119 min listen
Random Problems, Protecting Packages, and Vulns in Designs, Defaults & Data Leaks - ASW #283: Misusing random numbers, protecting platforms for code repos and package repos, vulns that teach us about designs and defaults, and more! Show Notes: by Security Weekly Podcast Network (Video)
39 min listen
Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283: Companies deploy tools (usually lots of tools) to address different threats to supply chain security. Melinda Marks shares some of the chaos those companies still face when trying to prioritize investments, measure risk, and scale their solutions to... by Security Weekly Podcast Network (Video)
41 min listen
Board's Pivotal Role in Cybersecurity as CISO-CEO Communication Gaps Continue - BSW #348: In the leadership and communications section, The Board's Pivotal Role in Steering Cybersecurity, CISO-CEO communication gaps continue to undermine cybersecurity, The Essence of Integrity in Leadership: A Pillar of Trust and Excellence, and more! Show... by Security Weekly Podcast Network (Video)
32 min listen
AI, Okta, Chrome, Quantum, Kaiser Permanente, FTC, FCC, NCSC, Josh Marpet, and more. - SWN #382: AI, Okta, Chrome, Quantum, Kaiser Permanente, FTC, FCC, NCSC, Josh Marpet, and more, are on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
37 min listen
Meet Silver SAML: Golden SAML in the Cloud - Eric Woodruff - BSW #348: A hybrid workforce requires hybrid identity protection. But what are the threats facing a hybrid workforce? As identity becomes the new perimeter, we need to understand the attacks that can allow attackers access to our applications. Eric Woodruff,... by Security Weekly Podcast Network (Video)
28 min listen
Your TV Is Scanning You - PSW #826: This week the crew discusses: When TVs scan your network, bad things can happen, PuTTY is vulnerable, Crush FTP, vulnerabilities that will never be fixed, CVEs are for vulnerabilities silly, you can test for easily guessable passwords too, FlipperZero... by Security Weekly Podcast Network (Video)
110 min listen
How GenAI Can Improve SecOps - Ely Kahn - ESW #359: We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some... by Security Weekly Podcast Network (Video)
30 min listen
Threat Modeling and Understanding Inherent Threats - Adam Shostack - ESW #359: This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the... by Security Weekly Podcast Network (Video)
45 min listen
TikTok, Flowmon, Cisco, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland - SWN #381: TikTok, Flowmon, Arcane Door, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: by Security Weekly Podcast Network (Video)
38 min listen

Related podcast episodes

Skip carousel

Successful Security Needs a Streamlined UX - Benedek Gagyi - ASW #278: One of the biggest failures in appsec is an attitude that blames users for security problems. A lot of processes and workflows break down because of an insecure design or insecure defaults. Benedek Gagyi chats with us about the impact of the user... by Security Weekly Podcast Network (Audio)
69 min listen
ASW #206 - Manish Gupta: In our first segment, we are joined by Manish Gupt, the CEO and Co-Founder of ShiftLeft for A discussion of how the changes and advancements in static application security testing (SAST) and intelligent software composition analysis (SCA) have helped... by Security Weekly Podcast Network (Audio)
75 min listen
ASW #211 - Sonali Shah: Go releases their own curated vuln management resources, OSS-Fuzz finds command injection, Microsoft gets rid of Basic Auth in Exchange, NSA provides guidance on securing SDLC practices, reflections on pentesting, comments on e2e Shifting left... by Security Weekly Podcast Network (Audio)
78 min listen
Breaking John - ASW #136: This week, we welcome Andrei Serban, Co-Founder at Fuzzbuzz, to discuss Fuzz Testing! Fuzzing can be successful AppSec strategy for finding software bugs. And deploying a fuzzer no longer needs to be a cumbersome process. Find out how fuzzing can help... by Security Weekly Podcast Network (Audio)
67 min listen
Platform Security - PaaS & Hosting - Trey Ford - ESW #221: - What security features does Heroku offer that the customer can control and how have these evolved over time? - How do you balance the security of the application, with the security of the deployment, with the security of the platform? - What are... by Security Weekly Podcast Network (Video)
32 min listen
Platform Security - PaaS & Hosting - Trey Ford - ESW #221: - What security features does Heroku offer that the customer can control and how have these evolved over time? - How do you balance the security of the application, with the security of the deployment, with the security of the platform? - What are... by Enterprise Security Weekly (Video)
32 min listen
ASW #207 - Chen Gour Arie: In today's high-tech industries, security is struggling to keep up with rapidly changing production systems and the chaos that agile development introduces into workflows. Application security (AppSec) teams are fighting an uphill battle to gain... by Security Weekly Podcast Network (Audio)
78 min listen
Shrug & Move On - ASW #160: This week, we welcome Maggie Jauregui, Offensive Security Researcher at Intel, to discuss Platform Firmware Security! Firmware security is complex and continues to be an industry challenge. In this podcast we'll talk about the reasons firmware... by Security Weekly Podcast Network (Audio)
72 min listen
Everybody's Looking For Something - ASW #152: This week, we welcome Manish Gupta, CEO and Co-Founder at ShiftLeft, to discuss Bringing Appsec to a Modern CI Pipeline! Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also... by Security Weekly Podcast Network (Audio)
71 min listen
Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Audio)
74 min listen
Big Smiles - ASW #179: There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take to broaden what we call appsec into something effective for modern apps, whether they're on the web, mobile, or cloud? We'll talk about... by Security Weekly Podcast Network (Audio)
74 min listen
The Psychology of Training - Matias Madou - ASW #198: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. We'll talk about how the definition of secure coding varies among developers and appsec teams, why it's important to... by Security Weekly Podcast Network (Video)
37 min listen
The Psychology of Training - Matias Madou - ASW #198: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. We'll talk about how the definition of secure coding varies among developers and appsec teams, why it's important to... by Application Security Weekly (Video)
37 min listen
New Wave Post Punk Security Hour - ASW #141: This week, we welcome Ted Harrington, Executive Partner at Independent Security Evaluators, to discuss Hackable; How to do Application Security Right! In the Application Security News, Implementation pitfalls in parsing JSON, finding all forms of a... by Security Weekly Podcast Network (Audio)
68 min listen
ASW #198 - Matias Madou: Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the same reasons. Matias Madou joins to talk about how the definition of secure coding varies among developers and appsec teams, why it's... by Security Weekly Podcast Network (Audio)
72 min listen
Pokémon & Synthwave & Hair & Hats - ASW #135: A premise of adding security to DevOps is we can "shift left" AppSec responsibilities, one of which is building apps so they're secure by design. Yet what resources does the AppSec community provide for this approach to design? We take a look at the... by Security Weekly Podcast Network (Audio)
68 min listen
Starting an OWASP Project (That's Not a List!) - Grant Ongers - ASW #272: We can't talk about OWASP without talking about lists, but we go beyond the lists to talk about a product security framework. Grant shares his insights on what makes lists work (and not work). More importantly, he shares the work he's doing to... by Security Weekly Podcast Network (Audio)
74 min listen
ASW #203 - Farshad Abasi: This week in the AppSec News: Apple introduces Lockdown Mode, PyPI hits 2FA trouble, cataloging cloud vulns, practical attacks on ML, NIST's post-quantum algorithms, & more! Appsec starts with the premise that we need to build secure code,... by Security Weekly Podcast Network (Audio)
70 min listen
Skills & Knowledge - ASW #167: This week, we welcome Anita D'Amico, VP, Market Development at Synopsys, and Patrick Carey, Senior Director of Product Marketing at Synopsys, to discuss AppSec Orchestration/Correlation & DevSecOps Efficiency! In the AppSec News: The Great Leak... by Security Weekly Podcast Network (Audio)
72 min listen
Josh Grossman - building Appsec programs, bridging security and developer gaps: Youtube VOD: #appsec, #owasp, #ASVS, #joshGrossman, #informationsecurity, #SBOM, #supplychain, #podcast, #twitch, #brakesec, #securecoding, #Codeanalysis Questions and topics: 1. The background to the topic, why is it something that interests... by BrakeSec Education Podcast
76 min listen
Creating the Secure Pipeline Verification Standard - Farshad Abasi - ASW #274: Farshad Abasi joins us again to talk about creating a new OWASP project, the Secure Pipeline Verification Standard. (Bonus points for not being a top ten list!) We talk about what it takes to pitch a new project and the problems that this new project... by Security Weekly Podcast Network (Audio)
57 min listen
Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Application Security Weekly (Video)
40 min listen
Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Video)
40 min listen
Security By Design - ASW #135: A premise of adding security to DevOps is we can "shift left" AppSec responsibilities, one of which is building apps so they're secure by design. Yet what resources does the AppSec community provide for this approach to design? We take a look at the... by Application Security Weekly (Video)
36 min listen
Security By Design - ASW #135: A premise of adding security to DevOps is we can "shift left" AppSec responsibilities, one of which is building apps so they're secure by design. Yet what resources does the AppSec community provide for this approach to design? We take a look at the... by Security Weekly Podcast Network (Video)
36 min listen
Memory Safety, Re-Writing Software, and OSS Supply Chains - Omkhar Arasaratnam - PSW #820: Omkhar Arasaratnam is the General Manager of the Open Source Software Foundation (OpenSSF) and appears on the show to discuss memory safety, why re-writing software isn't always the best option, open-source software supply chains, and more! Segment... by Security Weekly Podcast Network (Video)
52 min listen
Security Hygiene for Software Development: All links and images for this episode can be found on CISO Series How do we improve the quality of our software? In the rush to be competitive, security has often taken a back seat to be first to market. What's the formula for fast and secure... by Defense in Depth
26 min listen
Fuzz Testing - Andrei Serban - ASW #136: Fuzzing can be successful appsec strategy for finding software bugs. And deploying a fuzzer no longer needs to be a cumbersome process. Find out how fuzzing can help secure software beyond just memory safety issues and what the future holds for making... by Application Security Weekly (Video)
36 min listen
Fuzz Testing - Andrei Serban - ASW #136: Fuzzing can be successful appsec strategy for finding software bugs. And deploying a fuzzer no longer needs to be a cumbersome process. Find out how fuzzing can help secure software beyond just memory safety issues and what the future holds for making... by Security Weekly Podcast Network (Video)
36 min listen
S1E12: Really alarming breakpoints by Swift over Coffee
29 min listen

Discover this podcast and so much more

GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification - ASW #278

GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification - ASW #278

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes