Episode 215 Deep Dive: Edwin Kwan | Navigating the Wild West: Tools and Techniques to Assess the Security and Integrity of Open Source Software
KBKAST6 Okt 2023

Episode 215 Deep Dive: Edwin Kwan | Navigating the Wild West: Tools and Techniques to Assess the Security and Integrity of Open Source Software

In this episode, we are joined by Edwin Kwan (Head of Application Security and Advisory – Tyro Payments), as he sheds light on the meticulous risk acceptance process and shares his insights on using open source software to build applications swiftly with freely available parts. We explore the challenges of ensuring the security of open source software and the need for due diligence when downloading such software. Edwin raises thought-provoking questions about software verification, maintenance, and security, highlighting the tricky balance between maintaining security protocols and accommodating a wide range of individuals in the workplace.

Stay tuned as we examine the potential risks of using open source software and the complexities of explaining security issues to individuals who may not fully grasp their implications. Edwin shares captivating stories and real-life examples, including incidents where businesses chose to accept high-severity risks rather than investing in their mitigation.

Edwin a cybersecurity specialist whose approach towards security is to raise awareness, provide light touch controls to the software development life cycle to increase visibility of security issues, and work closely with engineering teams to quickly develop secure applications.

He started out as a software engineer and transitioned into application and information security to lead a range of security initiatives when the company was working towards obtaining an unrestricted banking licence.

He has presented at several events, including RSA, AISA, All Day Dev Ops, AppSec Day, OWASP and DevSecOps Leadership Forums.

Edwin is also a contributing journalist to the It’s 5:05 Podcast, a daily podcast on open source and cybersecurity news.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(442)

Episode 389 Deep Dive: Omar Santos | Attackers Already Have It - What New Frontier Models Mean for Your Security Strategy

Episode 389 Deep Dive: Omar Santos | Attackers Already Have It - What New Frontier Models Mean for Your Security Strategy

In the first weeks of March, Omar Santos got early access to the model that became Anthropic’s Mythos. About an hour of testing was enough to convince him cybersecurity had changed for good. Omar, a D...

14 Okt 43min

Episode 388 Deep Dive: Dean Saunders | The Breach That Won't Look Like a Breach: Why AI Security Starts With Your Data

Episode 388 Deep Dive: Dean Saunders | The Breach That Won't Look Like a Breach: Why AI Security Starts With Your Data

Most boards approved AI for the productivity gains, and far fewer asked what it would expose. Dean Saunders says conversations with large organisations usually start with models and end up on data: wh...

7 Okt 40min

Episode 387 Deep Dive: Dr Ahana Datta Fasel | China Doesn't Want What You Think It Wants

Episode 387 Deep Dive: Dr Ahana Datta Fasel | China Doesn't Want What You Think It Wants

Dr. Ahana Datta Fasel has spent years mapping 30 years of China’s cyber operations, and she opens by dismantling the story most of us have absorbed. China isn’t only hunting our secrets. Sometimes it ...

30 Sep 37min

Episode 386 Deep Dive: Shane Buckley | Is the Juice Worth the Squeeze? The AI Spending Reckoning

Episode 386 Deep Dive: Shane Buckley | Is the Juice Worth the Squeeze? The AI Spending Reckoning

Shane Buckley, CEO of Gigamon, has watched the AI spending story turn in months. Companies that treated token consumption as a badge of honour are now blowing through their AI budget by day three of t...

23 Sep 45min

Episode 385 Deep Dive: Reece Corbett-Wilkins | From Crisis to Resilience - Protecting Our Way of Life

Episode 385 Deep Dive: Reece Corbett-Wilkins | From Crisis to Resilience - Protecting Our Way of Life

Reece takes us behind the scenes of the Instructure incident, where his team fielded 65 instructions in 48 hours, and explains how a catastrophic cyber event actually gets run across insurers, governm...

16 Sep 46min

Episode 384 Deep Dive: Sumedh Thakar | Mythos Turned 30 Days Into 24 Hours.

Episode 384 Deep Dive: Sumedh Thakar | Mythos Turned 30 Days Into 24 Hours.

When Mythos hit in April, the security world split between panic and hype. Sumedh Thakar, President and CEO of Qualys, joins KB to make the calmer case that Mythos accelerated an old threat rather tha...

9 Sep 42min

Episode 383 Deep Dive: Sarah Sloan | It Still Runs, But Can You Defend It? The End-of-Life Tech Reckoning

Episode 383 Deep Dive: Sarah Sloan | It Still Runs, But Can You Defend It? The End-of-Life Tech Reckoning

The tech running hospitals, power grids and government services often still works. Sarah Sloan, Cisco’s Head of Cybersecurity Policy for APAC, joins KB to explain why that’s the problem, not the reass...

3 Sep 38min

Episode 382 Deep Dive: Quinton Anderson | Trust the System, Not the Agent – Zero Trust for the Agentic Enterprise

Episode 382 Deep Dive: Quinton Anderson | Trust the System, Not the Agent – Zero Trust for the Agentic Enterprise

KB sits down with Quinton Anderson, founder of Aigentsphere, to challenge one of the most repeated lines in AI governance: that a human in the loop keeps you safe. His view is that asking people to ap...

26 Aug 49min

Populärt inom Business & ekonomi

framgangspodden
varvet
rss-jossan-nina
rss-borsens-finest
uppgang-och-fall
badfluence
24fragor
rss-inga-dumma-fragor-om-pengar
avanzapodden
rss-dr-bjorklund
lastbilspodden
bathina-en-podcast
tabberaset
rss-kort-lang-analyspodden-fran-di
fill-or-kill
rikatillsammans-om-privatekonomi-rikedom-i-livet
kapitalet-en-podd-om-ekonomi
rss-dagen-med-di
borsmorgon
rss-hos-psykologen