Application Security WeeklySubscribe
Application security

HTTP RFCs Have Evolved, Breaking Into Cloud, Scaling AppSec at Netflix, & Confluence – Keith Hoodlet – ASW Vault

HTTP RFCs have evolved: A Cloudflare view of HTTP usage trends, Career Advice and Professional Development, Active Exploitation of Confluence CVE-2022-26134

Full episode and show notes

Guest

Engineering Director at Trail of Bits

Keith Hoodlet is an Engineering Director at Trail of Bits, where he leads a world-class team of AI/ML and Application Security consultants that blend cutting-edge security research with a practical attacker mindset. In addition to being a pioneer in AI bias bounty hunting, Keith holds both the Offensive Security Certified Professional (OSCP) and Offensive Security Web Assessor (OSWA) certifications.

Host

Tech Lead at Block

Related

Finding a Use for GenAI in AppSec – Keith Hoodlet – ASW #323

LLMs are helping devs write code, but is it secure code? How are LLMs helping appsec teams? Keith Hoodlet returns to talk about where he's seen value from genAI, where it fits in with tools like source code analysis and fuzzers, and where its limitations mean we'll be relying on humans for a while. Those limitations don't mean appsec should dismiss...
Redlining the Smart Contract Top 10 – Shashank . – ASW #322

The crypto world is rife with smart contracts that have been outsmarted by attackers, with consequences in the millions of dollars (and more!). Shashank shares his research into scanning contracts for flaws, how the classes of contract flaws have changed in the last few years, and how optimistic we can be about the future of this space. Segment Re...

You can skip this ad in 5 seconds