19 min
Georgia Weidman — Mobile, IoT, and Pen Testing
Georgia Weidman (@georgiaweidman) met with Robert at CodeMash to discuss her origin story, mobile, IoT, penetration testing, and details about her various companies.
Listen to the episodeEpisodes, page 10
304 episodes, going back to 2016. Showing 217–240.
19 min
Conclusion: Season 4 Finale
Here it is. The finale of season four. Thanks to everyone who listens in, and remember, if there are any people you want us to interview on the podcast,…
Listen to the episode47 min
Geoff Hill -- Rapid Threat Model Prototyping Process
Geoff Hill joins Chris and Robert to talk about Rapid Threat Model Prototyping Process.
Listen to the episode44 min
Bill Wilder -- Running Azure Securely
Bill Wilder joins Chris and Robert to talk about Running Azure Securely. You can find Bill on Twitter @codingoutloud FOLLOW OUR SOCIAL MEDIA: ➜Twitter:…
Listen to the episode36 min
Matt Konda -- OWASP Glue
Matt Konda joins Chris and Robert to talk about what Glue is. You can find Matt on Twitter @mkonda OWASP Glue FOLLOW OUR SOCIAL MEDIA: ➜Twitter:…
Listen to the episode31 min
Josh Grossman, Avi Douglen, and Ofer Maor -- AppSec in Israel and Three Talks to watch from AppSec USA
Josh Grossman, Avi Douglen, and Ofer Maor at AppSec USA join Chris. They discuss the AppSec group in Israel and a few critical talks you should watch from AppSec USA this year.
Listen to the episode45 min
Daniel Miessler -- OWASP IoT Top 10
Daniel Miessler joins Chris and Robert to talk about the upcoming Top 10 list for IoT.
Listen to the episode22 min
Travis McPeak -- SecOps Makes Developers Lives Easier
Travis McPeak joins Chris to talk about SecOps and how it can help make a developer's life easier.
Listen to the episode32 min
Chris Romeo -- Security Culture Hacking: Disrupting the Security Status Quo
We listen in on the #AppSecUSA talk by Chris about Security Culture Hacking. You can find Chris on Twitter @edgeroute FOLLOW OUR SOCIAL MEDIA: ➜Twitter:…
Listen to the episode30 min
Jim Manico -- The Extremely Unabridged History of SQLi and XSS
Jim Manico joins again to talk about how AppSec has changed over the years and gives us an in-depth look at the history of SQL Injection and XSS.
Listen to the episode44 min
Jeff Williams -- The History of OWASP
Chris talks with Jeff Williams about the History of OWASP and where it came from. You can find Jeff on Twitter @planetlevel FOLLOW OUR SOCIAL MEDIA:…
Listen to the episode37 min
Bjorn Kimminich -- The Joy of the Vulnerable Web: JuiceShop
Bjorn Kimminich joins to talk about JuiceShop. He dives into what JuiceShop is and some of its use cases.
Listen to the episode28 min
Swaroop Yermalkar -- iGoat and iOS Mobile Pen Testing
Chris is at AppSec USA and is joined by Swaroop to talk about iGoat. They discuss how iGoat relates to WebGoat and how they can be used for pen testing.
Listen to the episode36 min
Adam Bacchus and Jon Bottarini -- Two Sides to a Bug Bounty: The Researcher and The Program
Chris and Robert talk with Adam and John from HackerOne about Bug Bounty. They dive into bug bounty from the programming and security researcher sides to…
Listen to the episode31 min
Erlend Oftedal -- What You Require, You Must Also Retire
Chris talks with Erlend Oftedal about the Norway Chapter of OWASP and continues on to what retire.js is and how it works.
Listen to the episode28 min
Abhay Bhargav -- Threat Modeling as Code
Abhay Bhargav joins Robert to talk about threat modeling as code. He dives into how this can help you in your threat models.
Listen to the episode31 min
Tony UV -- Threat Libraries in the Cloud
Tony UV joins Robert to discuss all things threat libraries in the cloud. You can find Tony on Twitter @t0nyuv FOLLOW OUR SOCIAL MEDIA: ➜Twitter:…
Listen to the episode37 min
Aaron Rinehart -- Chaos Engineering and #AppSec
Chris and Robert talk to Aaron Rinehart about how the security community can embrace chaos engineering.
Listen to the episode35 min
Jessica Robinson and Vandana Verma-- WIA: Women in #AppSec
Jessie and Vandana join Chris from Women in #AppSec to discuss the project! They dive into what the project is and how the numerous OWASP Chapters around the world can participate!
Listen to the episode17 min
Karen Staley -- A Conversation with Karen
This week we're joined by Karen Staley, the Executive Director of the OWASP Foundation. She dives into what's happening on OWASP and what we can look forward to in the future.
Listen to the episode27 min
Mohammed Imran -- Back to the Lab Again with a DevOps
Mohammed Imran joins us to discuss the DevSecOps Studio and more about the beautiful world of DevOps.
Listen to the episode29 min
Niels Tanis -- A Slice of the Razor with ASP.Net Core
Niels Tanis joins to talk about Razor and ASP.Net Core versus General. You can find Niels on Twitter @nielstanis FOLLOW OUR SOCIAL MEDIA: ➜Twitter:…
Listen to the episode27 min
Ofer Maor -- A Pen Testers Transition to #AppSec: #VoteForOfer
Chris is joined by Ofer Maor to talk about his journey of transitioning into the world of #AppSec from the world of Pen Testing.
Listen to the episode22 min
Matt Tesauro -- #AppSec Pipeline as Toolbox
We're joined by Matt Tesauro, a co-lead for the AppSec Pipeline Project. He explains how they began building this project and some ways for you to start using this in your organization.
Listen to the episode