Application Security Weekly Subscribe

DevSecOps, Security Staff Acquisition & Development

Teaching Security In Software Development – Daniel Lowrie, Justin Dennison – ASW #83

November 4, 2019

We interview Daniel Lowrie, who is an Edutainer at ITProTV and Justin Dennison, who is also an Edutainer at ITProTV. Dan and Justin talk about how to bridge the gap between a developer and security. Developers are faced with the challenges of working under pressure to get things done quickly, often overlooking securing their code. We'll discuss the strategies to capture interest while addressing common pitfalls.

To learn more about ITProTV, visit: https://securityweekly.com/itprotv

Full episode and show notes

Guests

SONY DSC

Daniel Lowrie

Edutainer at ITProTV

Daniel teaches security and pen testing content for ITProTV. Certifications: CompTIA A+, Network+, Linux+, CySA+, and PenTest+; CEH; MCSA

Justin Dennison

Justin Dennison

Edutainer at ITProTV

Justin leads the content development for the DevProTV channel within ITProTV. Certifications: AWS Certified Solutions Architect – Associate; AWS Certified Developer – Associate; AWS Certified Cloud Practitioner; Oracle Certified Associate; Java SE 7 Programmer

Hosts

Mike Shema

Mike Shema

Tech Lead at Block

John Kinsella

John Kinsella

Co-founder & CTO at Cysense

Matt Alderman

Matt Alderman

VP, Product at Living Security

Related

Application security

Equifax’s Breach, CISA’s 1,000 Vulns, Rust’s TLS Library, Complexity vs. Design – ASW #256

September 25, 2023

A stroll back through the Apache Struts breach of Equifax, CISA's list of Known Exploited Vulnerabilities, Rust's replacement for OpenSSL, Go no longer throws programmers for a loop, complexity vs. design (that leads to better security).

Application security

Supply Chain Security Security with Containers and CI/CD Systems – Kirsten Newcomer – ASW #256

September 25, 2023

Supply chain has been a hot topic for a few years now, but so many things we need to do for a secure supply chain aren't new at all. We'll cover SBOMs, vuln management, and putting together a secure pipeline. Segment resources: https://www.solarwinds.com/assets/solarwinds/swresources/whitepaper/2111swiwhitepaper_nextgenbuild.pdf https://next.red...

Application security

Azure’s Eight XSS Vulns, CNCF’s Two Security Audits, CISA’s OSS Roadmap, Repojacking – ASW #255

September 18, 2023

A slew of XSS in Azure's HDInsights, CNCF releases fuzzing and security audits on Kyverno and Dragonfly2, CISA shares a roadmap for security open source software, race conditions and repojacking in GitHub, and more!