Artwork

Player FM - Internet Radio Done Right
Checked 6M ago
اضافه شده در three سال پیش
محتوای ارائه شده توسط ArmorCode. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط ArmorCode یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
Player FM - برنامه پادکست
با برنامه Player FM !
icon Daily Deals

Getting Started With AppSec

5:22
 
اشتراک گذاری
 

بایگانی مجموعه ها ("فیدهای غیر فعال" status)

When? This feed was archived on June 15, 2024 09:11 (11M ago). Last successful fetch was on November 25, 2024 09:09 (6M ago)

Why? فیدهای غیر فعال status. سرورهای ما، برای یک دوره پایدار، قادر به بازیابی یک فید پادکست معتبر نبوده اند.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

Manage episode 339527411 series 3381076
محتوای ارائه شده توسط ArmorCode. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط ArmorCode یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
  continue reading

8 قسمت

Artwork
iconاشتراک گذاری
 

بایگانی مجموعه ها ("فیدهای غیر فعال" status)

When? This feed was archived on June 15, 2024 09:11 (11M ago). Last successful fetch was on November 25, 2024 09:09 (6M ago)

Why? فیدهای غیر فعال status. سرورهای ما، برای یک دوره پایدار، قادر به بازیابی یک فید پادکست معتبر نبوده اند.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

Manage episode 339527411 series 3381076
محتوای ارائه شده توسط ArmorCode. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط ArmorCode یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
  continue reading

8 قسمت

همه قسمت ها

×
 
Developers don't want to be slowed down, but security teams don't want development speed driving AppSec posture off a cliff. The compromise: security guardrails instead of release gates. With a basis of mutual trust that only critical findings will be sent for remediation and all critical findings will be remediated, friction between teams can be mitigated. Avoiding alert fatigue is one thing both security and developer talent can agree on. About ArmorCode We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation. _____________________________________________________ Follow us www.armorcode.com LinkedIn: https://www.linkedin.com/armorcode Twitter: https://twitter.com/code_armor _____________________________________________________ About AppSecOps What is AppSecOps? https://www.armorcode.com/what-is-appsecops The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022 AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase…
 
Prioritizing threat/vulnerability findings takes thought, a satellite cam, and a microscope if you don't have an AppSecOps platform at work. There's a lot to consider: criticality variance across tools (they don't come normalized out of the box), threat intelligence on CVEs, and tool/technique weight factors, for starters. A major concept is the context around the app/sub-app/module associated with a finding. The software's dependencies, environment, provenance, and the sensitivity of its data are just a few values that affect priority. That context dictates resource alignment, while risk scoring influences specific tactical activities thereafter. About ArmorCode We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation. _____________________________________________________ Follow us www.armorcode.com LinkedIn: https://www.linkedin.com/armorcode Twitter: https://twitter.com/code_armor _____________________________________________________ About AppSecOps What is AppSecOps? https://www.armorcode.com/what-is-appsecops The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022 AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase…
 
Vulnerability Management looks different from business to business. What qualifies a risk as acceptable or not? When should confirmed vulns be fixed by? Perhaps most distressingly, how do we know when vulnerability has actually been remediated? Luis Guzmán talks about the different aspects of vulnerability and its most common musts: a workflow framework that security & dev agree on live critical finding notifications active remediation monitoring visibility throughout ticket lifecycles "from soup to nuts" About ArmorCode We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation. _____________________________________________________ Follow us www.armorcode.com LinkedIn: https://www.linkedin.com/armorcode Twitter: https://twitter.com/code_armor _____________________________________________________ About AppSecOps What is AppSecOps? https://www.armorcode.com/what-is-appsecops The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022 AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase…
 
A short release cycle has myriad benefits: faster delivery to market for new functionalities, and swiftly-improving accuracy toward goals (what we call Agile) chief among them. And from a security perspective, a quick reaction time to zero-day threats thanks to a well-oiled assembly line is invaluable. But, of course, there are drawbacks: like a lack of cohesion and communication between security and dev teams, and unequal pressure on AppSec to quicken their side of SLAs. As Luis points out, we discovered in our State of AppSecOps Report that the ship cycle sweet spot is 1-2 weeks (most often 2), wherein security can be effectively balanced with engineering initiatives. About ArmorCode We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation. _____________________________________________________ Follow us www.armorcode.com LinkedIn: https://www.linkedin.com/armorcode Twitter: https://twitter.com/code_armor _____________________________________________________ About AppSecOps What is AppSecOps? https://www.armorcode.com/what-is-appsecops The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022 AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase…
 
The SBOM Movement has gained huge attention in just half a year. Whether as an external dependency of a developing product or a mission-critical tech stack component, inbound software has provenance (and often, vulnerabilities) that need to be reported for security downstream. US and foreign government support, as well as executive action , have done so much to stir awareness of these supporting docs. Many are ready to embrace it as standard—but 2/3ʳᵈˢ or more organizations still are unaware of new SBOM mandates. Luis Guzmán explains why the future for SBOMs is bright but still has ways to go before reaching mass supply chain adoption. About ArmorCode We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation. _____________________________________________________ Follow us www.armorcode.com LinkedIn: https://www.linkedin.com/armorcode Twitter: https://twitter.com/code_armor _____________________________________________________ About AppSecOps What is AppSecOps? https://www.armorcode.com/what-is-appsecops The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022 AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase…
 
The transition from all-hardware to mostly-digital assets has complicated and decentralized the job of security. Cloud and container apps and infrastructure-as-code are examples of innovations whose security requirements will span multiple desks, as the role of the cybersecurity do-it-all becomes a relic of the past—even for smaller organizations. About ArmorCode We develop, sell, and deliver the world’s first and leading AppSecOps platform to our customers, along with the expertise, support and community they need to ship secure software and ship it fast. The ArmorCode platform brings together powerful AppSec Posture, Vulnerability, and Compliance Management with DevSecOps workflow automation. _____________________________________________________ Follow us www.armorcode.com LinkedIn: https://www.linkedin.com/armorcode Twitter: https://twitter.com/code_armor _____________________________________________________ About AppSecOps What is AppSecOps? https://www.armorcode.com/what-is-appsecops The State of AppSecOps Report: https://www.armorcode.com/state-of-appsecops-2022 AppSecOps Research from Enterprise Strategy Group: https://www.armorcode.com/esg-appsecops-showcase…
 
Loading …

به Player FM خوش آمدید!

Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.

 

icon Daily Deals
icon Daily Deals
icon Daily Deals

راهنمای مرجع سریع

در حین کاوش به این نمایش گوش دهید
پخش