Episodes
Show 153: Gary McGraw discusses the evolution of software security, the BSIMM, the CISO report, and the future of IoT
12/28/2018
Listen as Taylor Armerding and Gary discuss the early years and evolution of Cigital and software security, Gary’s software security touchpoints, the BSIMM, the CISO report, the Silver Bullet podcast, and what the future holds.
Duration:00:37:29
Show 152: Elias Levy discusses hacking, programming languages, full disclosure, inventory control, and software security
11/21/2018
Listen as Gary and Elias discuss the progress we’ve made in software security over the last 25 years, programming languages, full disclosure, the relationship between technology inventory and software security, and more.
Duration:00:29:00
Show 151: Meera Rao discusses software design analysis, CI/CD and DevOps, and mentorship
10/30/2018
Listen as Gary and Meera discuss how to deal with design flaws; touchpoints such as architecture risk analysis and threat modeling; CI/CD, DevOps, automation, and orchestration; the importance of mentorship; and more.
Duration:00:34:37
Show 150: Filippo Valsorda discusses programming languages and the dynamic world of cryptography
9/26/2018
Listen as Gary and Filippo discuss programming languages and the role they play in software security, getting started in cryptography, open source security, blockchain and cryptocurrency, and more.
Duration:00:30:02
Show 149: Brittany Postnikoff discusses the maker culture and the problems with robots
8/30/2018
Listen as Gary and Brittany discuss robotics, maker culture, the hands-on nature of learning, the security and privacy problems that robots introduce, robot vulnerability, and more.
Duration:00:32:59
Show 148: Gøran Breivik discusses Bergen, Norway and software security for the city
7/30/2018
Listen as Gary and Gøran discuss what it’s like to work for a city government and how to align the city’s goals with software security. They also examine how to get the city to pay attention to security along with all other focus areas, including GDPR, the challenges of digitalization, and how to work with the city to set a budget as you address security and privacy goals and concerns.
Duration:00:28:48
Show 147: Kathleen Fisher discusses DARPA research vs. Black Hat/DefCon research
6/29/2018
Listen as Gary and Kathleen discuss scientific research versus hacking "research," programming languages and software security, hacking (or not hacking) autonomous helicopters at DARPA, why machine learning looks pretty similar to how it looked 25 years ago, and more.
Duration:00:32:25
Show 146: Nicholas Weaver discusses network security, botnets, and cryptocurrency
5/29/2018
Listen as Gary and Nicholas discuss the Spectre vulnerability, botnet attacks, research tech transfer, cryptocurrencies and blockchain technology, and more.
Duration:00:37:26
Show 144: Ron Gula discusses government versus commercial security solutions
3/27/2018
Listen as Gary and Ron discuss government and commercial security solutions, the NIST framework, tech transfer, technical advisory boards, and more.
Duration:00:31:43
Show 143: Elena Kvochko discusses security policy and security technology
2/26/2018
Listen as Gary and Elena discuss security policy, security technology, the role of a CIO, holistic security tactics, the economics of a security breach, and more.
Duration:00:26:29
Show 142: Craig Froelich discusses the 2018 CISO Report
1/17/2018
Listen as Gary and Craig discuss the role of the CISO in the financial services ecosystem and the newly released 2018 CISO Report.
Duration:00:30:11
Show 141: Bruce Potter discusses ShmooCon, DevOps, and the CISO role
12/28/2017
Listen as Gary and Bruce discuss ShmooCon, the state of software security books, network security trends, hacking back, the relationship between preventative security engineering and operational security, DevOps, the CISO role, and more.
Duration:00:33:23
Show 140: Adrienne Porter Felt discusses usable security at Google and web versus mobile permission models
11/30/2017
Listen as Gary and Adrienne discuss usable security, web and mobile security indicators, browser warnings, permission models, and more.
Duration:00:23:24
Show 139: Matias Madou discusses secure development training and software security testing research
10/31/2017
Listen as Gary and Matias talk about effective software security testing methods, security research, secure development training, and more.
Duration:00:25:24
Show 138: Nicole Perlroth discusses life as a cyber security journalist
9/29/2017
Listen as Gary and Nicole talk about life as a cyber security journalist, being a woman in the security industry, and playing up the sex appeal of cyber security.
Duration:00:31:42
Show 137: Wafaa Mamilli Discusses Cultural Differences in Technology Management
8/31/2017
Listen as Gary and Wafaa cover cultural differences in technology management, CISO education, organizational hierarchy, and more.
Duration:00:31:58
Show 136: Pavi Ramamurthy discusses the relationship between development and software security
7/31/2017
Listen as Pavi and Gary discuss whether a background in development makes you a better software security resource, CI/CD, security testing, the role that office hours play in software security awareness, and more.
Duration:00:31:54
Show 135: Ksenia Dmitrieva-Peguero discusses software security and AngularJS
6/29/2017
Listen as Gary and Ksenia discuss software security awareness, AngularJS, security conferences, and more.
Duration:00:25:57
Show 134: Kelly Jackson Higgins Discusses Cyber Security Journalism
5/24/2017
Listen as Gary and Kelly discuss how to separate fact from fiction when it comes to news in security, changes in security-focused journalism in recent years, social media, security politics, and more.
Duration:00:24:57
Show 133: Cheryl Biswas Discusses the Politicization of Cyber Security
4/27/2017
Listen as Gary and Cheryl discuss aligning security to work as a service for the business rather than an imposition for employees, trending cyber security political topics, work-life balance, and more.
Duration:00:29:09