After getting a ping from an old friend about a potential new OWASP project, I had to bring him on as a guest. He's got an interesting idea around potential vulnerabilities in web crawlers which just happen to gather data for so many AI system. We talk about that, Cybersecurity and Government and so much more.

Show Links:

- LinkedIn https://www.linkedin.com/in/buanzo/
- Github https://www.linkedin.com/in/buanzo/

The OWASP Podcast

ep2023-09  Vulnerable Data Gathering for AI with Arturo Buanzo Busleiman

There's no reason to be scared about a pen test - especially when it's run by a professional like Brad Causey. I catch up with Brad in this episode to discuss what's recently changed in pen testing in how you test and people's motivations for hiring a pen testing. Interesting and not spooky at all.

Show Links:
Brad on LinkedIn
- https://www.linkedin.com/in/bradcausey/
SecurIT360
- https://www.securit360.com/
- https://www.linkedin.com/company/securit360/
OWASP Testing Guide
- https://owasp.org/www-project-web-security-testing-guide/

OWASP Podcast

ep2024-10 Don't be Scared, It's just a Pen Test with Brad Causey

I had a chance to sit down with Pete Cheslock and Chris Gervais of Threat Stack to talk about DevOps and Security. Pete and Chris are two sharp people and so it was a great discussion. Hope you enjoy another DevOps Chat from DevOps.com

Pete Cheslock and Chris Gervais of Threat Stack

In this DevOps Chat we sit down with Pete Chestna of CA Veracode about a survey they conducted of Developers and Security teams. The goal was to see if the teams were working together in an effort of making security everyone's responsibility.

Pete is a great evangelist for DevSecOps, having been a developer for many years, as well as deeply involved in the security community. Pete always has great things to say and you will find this interview very interesting I think!

DevOps Chat

Developers and Security w/ Pete Chestna, Veracode

Chef has spent a lot of time bringing security and compliance into the software development lifecycle (SDLM). They have several solutions both open source and commercial which can help with your DevSecOps practice. I had a chance to sit down with Dan Hauenstein and Dominick Richter. Dominick is one of the founding members of dev-sec.io and co-creator of Chef Compliance.

DevOps & Security Blvd Chats

Chef Compliance & Security update

Application Security Requirements & Threat Management (ASRTM)is a great way to:
• Lowering costs to build secure	software
• Making	security measurable
• Turning unplanned work into planned work
• Freeing	up time away	from remediation,	and into feature development
• Having	a single process that works	with	in-house, outsourced, and	commercial software
• Providing confidence	that	software	is secure, when requirements	are	linked to verification

In this chat with Rohit Sethi of Security Compass, we discuss ASRTM and how it helps DevOps teams, security teams and DevSecOps.

Security Boulevard Chats

ASRTM, Application Security Requirements & Threat Management

WhiteSource has become a force in the security of open source components in your applications. One would think that it would follow that securing these open source components inside of a container would flow from this. But with containers, all is not always as it seems. 

Containers require a approach that is unique to containers. So the folks at White Source went to the lab and have engineered a solution that is container native and container specific.  

In this DevOps chat we speak with VP of Product David Habusha about White Source for Containers.

White Source for Containers w/ David Habusha

In episode 21 of EnterpriseReady, Grant interviews Michel Feaster, CEO and Co-Founder of Usermind. They discuss Michel’s journey from gas station employee to enterprise software CEO, as well as the relationship between product, product marketing, and marketing.

Subscribe in iTunes

EnterpriseReady - Ep. #21, Product and Narrative with Michel Feaster of Usermind

WhiteHat Security is one of the pioneers in AppSec. As such they were an early advocate for DevSecOps. They have been doing annual surveys of the security and developer space for several years.  In this years survey the good news is that we are seeing real progress in DevSecOps adoption by developers and security teams. But all is not roses. Some of the same old issues are still there, including how long it takes us to fix vulnerabilities and security issues.

In this DevOps Chats we speak with Eric Sheridan, Chief Scientist of WhiteHat about the survey results and what they mean. Have a listen to find out Eric's take on the foundings.

DevOps Chats

DevSecOps Survey Results with Eric Sheridan, WhiteHat Security

Sumo Logic has been one of the pioneers in DevSecOps and log analysis for many years now. In this DevOps Chat we speak with Founding VP of Product & Strategy, Bruno Kuric about the Sumo Continuous Intelligence Platform and how it is taking security into the next era.
Have a listen as Bruno explains how Sumo is trying to meet the challenges of keeping up with the speed of business, today.

Sumo Logic Continuous Intelligence w/ Bruno Kurtic

Heavybit is the leading early-stage investor in enterprise infrastructure. Since 2013, we've helped launch and scale visionary technical startups—from DevSecOps and feature flagging to AI code generation and beyond. We go hands-on from day 0, backing founders as they turn code into companies and build the future of software from the bottom up to the top down.

"DevOps Chats" by Techstrong Group, the force behind industry-leading platforms like DevOps.com, Cloud Native Now, Security Boulevard, Techstrong.ai, DigitalCxO, and Techstrong.TV, is your premier destination for all things DevOps. Hosted by industry veterans Alan Shimel and Mitchell Ashley, this podcast series delves deep into the world of DevOps, bringing you the latest trends, innovative strategies, and insightful discussions that matter.

Each episode of "DevOps Chat" is a journey through the evolving landscape of DevOps, featuring interviews with thought leaders, practitioners, and change-makers who are shaping the future of technology. Whether you're a developer, operations professional, IT leader, or tech enthusiast, Alan and Mitchell ensure you stay informed, engaged, and ahead of the curve.

From continuous integration and delivery to cloud-native development and cybersecurity, "DevOps Chat" covers the spectrum, offering valuable lessons, expert advice, and engaging stories. Tune in to explore how DevOps principles and practices are transforming the tech industry, driving efficiency, enhancing security, and fostering innovation.

Join us at "DevOps Chat" for your regular dose of DevOps insights, inspiration, and community. It's not just a podcast; it's your gateway to the forefront of the DevOps movement. Subscribe now and be part of the conversation that's setting the pace for the future of technology.

The OWASP Podcast Series is a recorded series of discussions with thought leaders and practitioners who are working on securing the future for coming generations.

Popular tracks tagged #devsecops