A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293

Update: 2024-07-30

Description

Modern appsec isn't modern because security tools got shifted in one direction or another, or because teams are finding and fixing more vulns. It's modern because appsec is meeting developer needs and supporting the business. Paul Davis talks about how AI is (and isn't) changing appsec, the KPIs that reflect outcomes rather than being busy, and the importance of communication for security teams.

This segment is sponsored by JFrog. Visit https://securityweekly.com/jfrog to learn more about them!

Show Notes: https://securityweekly.com/asw-293

Comments

Top Podcasts

The Best New Comedy Podcast Right Now – June 2024 The Best News Podcast Right Now – June 2024 The Best New Business Podcast Right Now – June 2024 The Best New Sports Podcast Right Now – June 2024 The Best New True Crime Podcast Right Now – June 2024 The Best New Joe Rogan Experience Podcast Right Now – June 20 The Best New Dan Bongino Show Podcast Right Now – June 20 The Best New Mark Levin Podcast – June 2024

In Channel

Total Recall? LLM finds bug in SQLite, C++ safety failures, zero time for zero privs - ASW #306

2024-11-0533:29

$Bug bounties, vulnerability disclosure, PTaaS, fractional pentesting - Grant McCracken - ASW #306$

Bug bounties, vulnerability disclosure, PTaaS, fractional pentesting - Grant McCracken - ASW #306

2024-11-0532:08

Protecting Identity of AI Agents & Standardizing Identity Security for SaaS Apps - Shiven Ramji, Arnab Bose - ASW #305

2024-10-2930:42

Making TLS More Secure, Lessons from IPv6, LLMs Finding Vulns - ASW #305

2024-10-2953:04

JSON Parsing, Email Parsing, CISA's Bad Practices Guide, Abusing Disclosure Policies - ASW #304

2024-10-2238:34

The Complexities, Configurations, and Challenges in Cloud Security - Scott Piper - ASW #304

2024-10-2238:53

Perl & PHP Vulns, Fuzzing & Parsers, Protecting Multi-Hosted Tenants, Secure Design - ASW #303

2024-10-1542:00

RCE from Iconv + PHP, Fuzzing a Codec, Fuzzing LLMs, Revisiting Recall - ASW #302

2024-10-0837:03

The Future of Zed Attack Proxy - Simon Bennetts, Ori Bendet - ASW #302

2024-10-0835:34

More Car Hacks, CUPS Vulns, Microsoft's SFI, Memory Safety, Password Complexity - ASW #301

2024-09-3045:57

Fuzzing for Vulns, GitLab Auth Bypass, JPEG Vulns, Programming Language Ranks - ASW #300

2024-09-2432:45

Vulnerable APIs and Bot Attacks: Two Interconnected, Growing Security Threats - David Holmes - ASW #300

2024-09-2435:07

A TLD Takeover, An LLM CTF, A Firmware Flaw, 6 Truths of Cyber Risk - ASW #299

2024-09-1729:16

Bringing Secure Coding Concepts to Developers - Dustin Lehr - ASW #299

2024-09-1733:10

Paying Down Tech Debt, Rust in Firmware, EUCLEAK, Deploying SSO - ASW #298

2024-09-1056:25

Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW Vault

2024-09-0237:48

Apache HTTPD Vulns, Hacking IoT Speakers, Use Cases for WASM, Slack AI Leak - ASW #297

2024-08-2727:08

Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297

2024-08-2737:21

Navigating the Path to Maturity & AI is helping combat cyber threats - Shimon Modi, Boaz Barzel - ASW #296

2024-08-2039:21

The Fallout and Lessons Learned from the CrowdStrike Fiasco - Allie Mellen, Jeff Pollard - ASW #296

2024-08-2042:38

00:00

1.0x

A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293

#box-pro-ellipsis-17312701609002{-webkit-line-clamp:2;}A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293

A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293

A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293