EP 49 — Semgrep’s Colleen Dai on Building Security Strategies and Relationships with Other Teams
Update: 2023-11-02
Description
In this special episode of the Future of Application Security, recorded at the Developers & Security are Friends Day, Eric speaks with Colleen Dai, Senior Security Researcher at Semgrep, an open source static analysis tool. They discuss strategies security teams can take to reduce false positives, use secure defaults to eliminate bug classes, and reduce complexity in security decision-making. They also talk about ways to build the relationships between security, developers, and engineers, which includes aligning on goals, communication, and recognition.
Topics discussed:
- Colleen's background and what her security research role at Semgrep entails.
- How to use secure defaults to eliminate bug classes and reduce the complexity in security decisions.
- How to reduce false positives by writing rules and checks, especially ones that are customized to your organization.
- How to better align the goals of security and developers by focusing on creating good software — and good software is secure software.
- How to build relationships with engineers through communication and recognition, not just talking through Jira tickets.
- Why security and developers still struggle with cross-site scripting and how it can be fixed.
Comments
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel