Cybersecurity adheres to the belief that the more results you can generate, the better your security model. This is certainly true in the application security space, where the more alerts that are generated, the better an organization's security posture. But this isn't necessarily true. In this Inside AppSec Podcast interview, Contrast's Chief Scientist and Co-founder Arshan Dabirsiaghi and Head of Product Marketing Mahesh Babu discuss why this belief is so firmly entrenched in the application security space and why less is actually more. The interview also touches on Contrast's pipeline-native static analysis tool (Contrast Scan) and how it turns legacy static scanning models on their head to produce faster scan results and dramatically greater accuracy with significant improvements in operational efficiency.

Blog Posts:
MODERN PROBLEMS: TRADITIONAL SECURITY SCANNING WASN’T BUILT FOR TODAY’S PIPELINES
https://www.contrastsecurity.com/security-influencers/modern-problems-traditional-security-scanning-wasnt-built-for-todays-pipelines

CONTRAST ANNOUNCES THE FIRST BREAKTHROUGH IN SAST IN 15 YEARS
https://www.contrastsecurity.com/security-influencers/contrast-announces-the-first-breakthrough-in-sast-in-15-years

White Paper: WHITE PAPER: PIPELINE-NATIVE SCANNING FOR MODERN APPLICATION DEVELOPMENT https://www.contrastsecurity.com/whitepaper-pipeline-native-scanning-modern-application

Why More Isn't Better When It Comes to AppSec and Why Less Is Better

Contrast Labs was a fledgling organization just a few years ago when Contrast’s CISO David Lindner took on the mantle of leadership. Today, Contrast Labs is a pivotal linchpin—threat modeling to protect Contrast’s network, applications, users, and data from malicious attacks, providing engineering with product ideas, overseeing product bug bounty programs, and competing in capture-the-flag (CTF) events. In addition to discussing each of these topics, Lindner explains how his team has partnered with marketing to generate data-driven bimonthly and annual reports that customers and prospects use to benchmark their application security programs. He also provides his insights on the role of the CISO in the application security space.

2021 Application Security Observability Report
https://www.contrastsecurity.com/2021-observability-report

Checklist: 4 Ways To Boost Application Security This Month:
https://www.contrastsecurity.com/hubfs/DocumentsPDF/4-Ways-to-Boost-Application-Security-This-Month_Checklist.pdf?hsLang=en

Contrast Labs Sets a High Bar and Plays a Critical Role in Protecting Contrast Customers

Software development is a core component of digital transformation, and the use of serverless technologies is helping to accelerate release cycles to new heights. A panel of serverless application security experts discuss key findings and insights from a new survey report on serverless application security in this Inside AppSec Podcast. The moderated discussion touches on topics such as the current and future outlook of serverless applications, the top application security challenges organizations face in embracing serverless applications, serverless application security best practices and benchmarks, and much more.

Episode #58 New Serverless Application Security Solution Is a Transformative Breakthrough: https://soundcloud.com/contrastsecurity/new-serverless-application-security-solution-is-a-transformative-breakthrough

Key Takeaways From a New Serverless Application Security Report

Forrester predicts that 25% of developers will be using serverless technologies by the end of next year. There are a lot of benefits from serverless applications: faster release cycles, lower infrastructure costs, and improved efficiencies. Yet, at the same time, organizations are running into application security roadblocks. Legacy application security tools simply cannot scale or keep pace demanded by serverless applications. In response, Contrast just released Contrast Serverless Application Security, which automatically detects security vulnerabilities directly within serverless environments. This empowers developers to quickly validate and prioritize test results for remediation. Contrast’s Head of Cloud-native Security Research Tal Melamed and Director of Product Marketing Blake Connell sat down with the Inside AppSec Podcast team to discuss this new product and what differentiates it from current application security approaches on the market.

Episode #57 Key Takeaways From a New Serverless Application Security Report: https://soundcloud.com/contrastsecurity/key-takeaways-from-a-new-serverless-application-security-report

New Serverless Application Security Solution Is a Transformative Breakthrough

Contrast Security secures the code that global business relies on. It is the industry's most modern and comprehensive Code Security Platform, removing security roadblock inefficiencies and empowering enterprise developers to write and release secure application code faster. The Contrast platform automatically detects vulnerabilities while developers write code, eliminates false positives, and provides how-to-fix guidance for easy and fast vulnerability remediation. Security and development teams can then innovate faster while accelerating digital transformation initiatives.

This track is not available anymore.

Other tracks from Contrast Security