Application Security Weekly Subscribe

Application security, DevSecOps

DevSecOps Essentials – Keith Hoodlet – ASW #224

January 2, 2023

How do you mature a team responsible for securing software? What are effective ways to prioritize investments?

We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like.

Segment resources:

https://securing.dev/categories/essentials/

Full episode and show notes

Guest

Keith Hoodlet

Application Security Manager at Thermo Fisher Scientific

Keith Hoodlet is the Application Security Manager at Thermo Fisher Scientific. He is the Co-Founder of the InfoSec Mentors Project .

Hosts

Tech Lead at Block

AVP Application Security at PRA Group

Senior Engineering Leader at AWS

Related

Application security

A 2024 Appsec Report, Preparing for the AIxCC, Secure Design and Post-Quantum Crypto – ASW #291

July 15, 2024

Cloudflare's 2024 appsec report, reasoning about the Cyber Reasoning Systems for the upcoming AIxCC semifinals at DEF CON, lessons in secure design from post-quantum cryptography, and more!

Vulnerability Management

Producing Secure Code by Leveraging AI – Stuart McClure – ASW #291

July 15, 2024

How can LLMs be valuable to developers as an assistant in finding and fixing insecure code? There are a lot of implications in trusting AI or LLMs to not only find vulns, but in producing code that fixes an underlying problem without changing an app's intended behavior. Stuart McClure explains how combining LLMs with agents and RAGs helps make AI-i...

Vulnerability Management

Polyfill Empties Trust, regreSSHion, CocoaPods Vulns & Secure Design, LLM Bughunters – ASW #290

July 8, 2024

Polyfill loses trust after CDN misuse, an OpenSSH flaw reappears, how to talk about secure design from some old CocoaPods vulns, using LLMs to find bugs, Burp Proxy gets more investment, and more!