Security Posture is a Thing
What is security posture? Izar was at a conference in Amsterdam, where he was asked to define security posture and how to measure it. Is security posture qualitative or quantitative, and can it be com...
18 Jul 202344min
Should #AppSec be Part of the Development Team?
The big question is if it's possible to lose the application security team and move all the functions directly into development. What are developers' roles in application security (AppSec), and what ...
10 Jul 202337min
Lack of Reasonable, or Everything That Is Wrong with Security Requirements
How do you determine what constitutes "reasonable security" when evaluating vendors? Is “reasonable” a measure of compliance to a set standard? Is it reasonable to expect mature threat modeling practi...
29 Jun 202334min
We Don't Know What We Don't Know
Certificate pinning is a security measure used in computer networking and something Chris candidly admits to his lack of understanding. Matt and Izar explain certificate pinning, a client-side operati...
20 Jun 202322min
Privacy and the creepiness factor of collecting data
What is privacy, and how does it intersect with security? We are joined by our first guest, Ally O'Leary, a privacy compliance expert. Ally works for a consumer electronics company, ensuring complianc...
12 Jun 202347min
Security Guardrails and Paved Roads
Guard rails and paved roads -- how do they fit together in application security? Guardrails are security tools in the pipeline that help ensure the software doesn't drift too far from established sta...
5 Jun 202342min
Capture the Flag or NOT?
There is an overemphasis on Capture The Flag in the security world. Instead, the industry should focus more on the 'builder' perspective to develop robust systems rather than the 'breaker' mindset typ...
27 Mai 202341min
Simple Product Security Requirements
Matt, Izar, and Chris discuss the United Kingdom's new minimum security standards for all Internet-connected consumer products. They highlight three key aspects of these new standards: Banning of Uni...
19 Mai 202338min
