On this week, we listen in on the #AppSecUSA talk by Chris about Security Culture Hacking. You can find Chris on Twitter @edgeroute
The post Security Culture Hacking: Disrupting the Security Status Quo (S04E20) appeared first on Security Journey.
On this episode, Jim Manico joins again to talk about the ways that AppSec has changed over the years and give us an in-depth look at the history of SQL Injection and XSS. You can find Jim on Twitter @manicode
The post The Extremely Unabridged History of SQLi and XSS(S04E19) appeared first on Security Journey.
On this episode, Chris talks with Jeff Williams about the History of OWASP and where it came from. You can find Jeff on Twitter @planetlevel
The post The History of OWASP (S04E18) appeared first on Security Journey.
Bjorn Kimminich joins to talk about JuiceShop on this weeks episode. He dives into what JuiceShop is and some of the use cases for it. You can find Bjorn on Twitter @bkimminich JuiceShop's Twitter JuiceShop Demo
The post The Joy of the Vulnerable Web: JuiceShop(S04E17) appeared first on Security Journey.
On this episode, Chris is at AppSec USA and is joined by Swaroop to talk about iGoat. They discuss how iGoat relates to WebGoat and how they can be used for pen testing. You can find Swaroop on Twitter @swaroopsy
The post iGoat and iOS Mobile Pen Testing (S04E16) appeared first on Security Journey.
On this episode, Chris and Robert talk with Adam and John from HackerOne about Bug Bounty. They dive into bug bounty from the programming side and the security researcher side to show how you can put these pieces together to be successful with bug bounty. You can find Adam on Twitter @SushiHack and Jon @jon_bottarini [...]
The post Two Sides to a Bug Bounty: The Researcher and The Program (S04E15) appeared first on Security Journey.
Chris talks with Erlend Oftedal about what the Norway Chapter of OWASP and continues on into what retire.js is and how it works. You can find Erlend on Twitter @webtonull
The post What You Require, You Must Also Retire (S04E14) appeared first on Security Journey.
Abhay Bhargav joins Robert this week to talk about threat modeling as code. He dives into how this can help you in your own threat models. You can find Abhay on Twitter @abhaybhargav
The post Threat Modeling as Code (S04E13) appeared first on Security Journey.
Tony UV joins Robert on this weeks episode to discuss all things threat libraries in the cloud. You can find Tony on Twitter @t0nyuv
The post Threat Libraries in the Cloud (S04E12) appeared first on Security Journey.
On this episode, Chris and Robert talk to Aaron Rinehart about how the security community can embrace chaos engineering. You can find Aaron on Twitter @aaronrinehart
The post Chaos Engineering and #AppSec (S04E11) appeared first on Security Journey.
On this episode, Chris is joined by Jessie and Vandana from Women in #AppSec to discuss the project! They dive in what the project is and how the numerous OWASP Chapters around the world can participate! You can find them on Twitter @InfosecVandana and @jessrobin96
The post WIA: Women in #AppSec (S04E10) appeared first on Security Journey.
This week we're joined by Karen Staley, the Executive Director of the OWASP Foundation. She dives into what's happening on OWASP and what we can be looking forward to in the future. You can find her on Twitter @owasped
The post A Conversation with Karen (S04E09) appeared first on Security Journey.
Mohammed Imran joins to discuss the DevSecOps Studio and more about the wonderful world of DevOps. You can find him on Twitter @secfigo DevSecOps Studio
The post Back to the Lab Again with a DevOps (S04E08) appeared first on Security Journey.
On this week, Niels Tanis joins to talk about Razor and ASP.Net Core versus General. You can find Niels on Twitter @nielstanis
The post A Slice of the Razor with ASP.Net Core (S04E07) appeared first on Security Journey.
On this week's episode, Chris is joined by Ofer Maor to talk about his journey about transitioning into the world of #AppSec from the world of Pen Testing. You can find him on Twitter @OferMaor
The post A Pen Testers Transition to #AppSec: #VoteForOfer (S04E06) appeared first on Security Journey.
This week, we're joined by Matt Tesauro, a co-lead for the AppSec Pipeline Project. He explains how they began building this project and some ways for you to start using this in your organization. You can find Matt on Twitter @matt_tesauro
The post #AppSec Pipeline as Toolbox (S04E05) appeared first on Security Journey.
Stephen de Vries joins to discuss Threat Modeling and the unique approach that he takes by using tooling. We also discuss application security and startups. You can find Stephen on Twitter @stephendv Stephen is the CEO of Continuum Security. You can visit them on the web to find out more about their tool based solution [...]
The post Threat Modeling with a bit of #Startup (S04E04) appeared first on Security Journey.
On this episode, Julien Vehent joins to discuss all things DevOps + Security. We talk through Julien's new book, Securing DevOps and go in depth as to the journey he went through building security into DevOps at his job. You can find Julien on Twitter @jvehent Purchase the book here! The folks over at Manning [...]
The post Securing DevOps (S04E03) appeared first on Security Journey.
Christian Folini joins Chris at AppSec EU for this episode about ModSecurity and the Core Rule Set project from OWASP. They dive into the timeline for the abstraction layer piece of the project and much more. You can find Christian on Twitter @ChrFolini. OWASP ModSecurity Core Rule Set ModSecurity
The post CRS and an Abstraction Layer (S04E02) appeared first on Security Journey.
On this episode, Chris is joined by Sean Wright to discuss the changes Google made with how they handle the HTTP Protocol. They also dive into TLS and some other pieces of crypto that relate to #AppSec. You can find Sean on Twitter @SeanWrightSec
The post Google Chrome and the Case of the Disappearing HTTP (S04E01) appeared first on Security Journey.