CSCP S03EP14 - Brook Schoenfield - Appsec and History what have we learned so far

Cyber Security & Cloud Podcast

English - October 02, 2022 19:19 - 47 minutes - 65.9 MB
Technology News Tech News Homepage Download Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: CSCP S03EP13 - Walter Haydock - Vulnerabilities and pragmatism where do we start looking

Next Episode: CSCP S03EP15 - Stephanie Dannan - Unusual Journeys in appsec

Brook Schoenfield is an Elder AppSec Diplomat, the author of seven books about software security and AppSec, a researcher, the builder and leader of four AppSec programs at major tech companies, and a Master Security Architect for consultancies. Brook talks about his long career path, concerns and hopes for the industry, and the importance of threat modelling. There are 27-28 million programmers on Earth, but Brook fears that only a million work in security.

The episode is brought to you by AppSec Phoenix Ltd with the Phoenix Security Cloud Platform, you can make vulnerability management for software and cloud SMART. Follow the tag #appsecsmart

https://www.appsecphoenix.com Get access today: https://appsecphoenix.com/demo

0:00 Introductions

4:00 27-28 mil programmers need for security

6:30 No silver bullet in software security

8:55 Brook’s career path into security

13:10 Bugs aren’t going anywhere

15:00 Next generation of InfoSec

21:06 Threat modelling, dynamic risk assessment

26:05 Story of threat modelling

28:06 Threat modelling tools

29:40 Beyond functionality, malicious attackers

32:30 Communicating with management