DevOps: Politics, People and Process with Paula Thrasher
I first met Paula Thrasher at DevOps Summit 2016 in San Francisco. Her message about people at the core of software supply chain processes resonated with me enough that I invited her to participate on...
24 Feb 201614min
OWASP Top 10 Proactive Controls Project with Jim Manico and Katy Anton
The OWASP Top 10 Proactive Controls Project uses the OWASP Top 10 model as a way to encourage the community to participate in the building and maintenance of a Top 10 project aimed at developers. In t...
9 Feb 201621min
The OWASP WebGoat Project, version 7.0, with Bruce Mayhew
The WebGoat Project started 10 years ago and has had over 1,000,000 downloads. Version 7.0 is being released this week. I caught with Bruce Mayhew, project lead, to talk about the history of the proje...
1 Feb 201617min
Johanna Curiel on the Growing Pains of OWASP and Management of Project Reviews
Several months ago Johanna Curiel figured she'd had enough and was ready to take a break from OWASP. Recently, she came back and is working tirelessly to revamp the Project Review initiative. I talked...
27 Jan 201626min
2016 - What's in Store for the OWASP 24/7 Podcast Series
As we move into 2016 and my second year as executive producer of OWASP 24/7, I want to give a quick overview of my objectives for the year and what you can expect from the series.
21 Jan 20164min
OWASP Shark Tank - Could You Convince Someone to Invest in Your Project?
Funding of projects. Allocation of personal time. What does it take to get a project funded with limited resources? The OWASP NYC/NJ chapters are trying something new at the December 7th meeting: two ...
25 Nov 201524min
OWASP Application Security Verification Standard Project w/ Andrew van der Stock
The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls. The primary aim of the OWASP ASVS Project is to normalize ...
1 Okt 20158min
OWASP Benchmark Project w/ Dave Wichers
There's been a lot of discussion around the OWASP Benchmark Project since it's latest release. Jeff Williams wrote an article and then received a response from Chris Wysopal at Veracode. I was able to...
30 Sep 201514min
