#25: Secure by design, threat modeling, and diversity of thought in security teams with Simon Cole

Software Security Gurus

26:46

For many travelers, Antarctica is a bucket-list destination, a once-in-a-lifetime opportunity to touch all seven continents. In 2023, a record-breaking 100,000 tourists made the trip. But the journey begs a fundamental question: What do we risk by traveling to a place that is supposed to be uninhabited by humans? And as the climate warms, should we really be going to Antarctica in the first place? SHOW NOTES: Kara Weller: The Impossible Dilemma of a Polar Guide Marilyn Raphael: A twenty-first century structural change in Antarctica’s sea ice system Karl Watson: First Time in Antarctica Jeb Brooks : 7 Days in Antarctica (Journey to the South Pole) Metallica - Freeze 'Em All: Live in Antarctica Learn about your ad choices: dovetail.prx.org/ad-choices…

for 4 år siden 28:30

MP3•Episode hjem

In episode 25 of Software Security Gurus, Matias Madou chats to Simon Cole, Global Security Architecture & Engineering Director at dentsu. They discuss his multi-faceted experience in security architecture, including his views on what constitutes "secure by design". They also discuss threat modeling and empathy with developers, in addition to welcoming diversity of thought into a team for best results.

Want to nominate a guru? Get in touch! www.softwaresecuritygurus.com.

--- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message

26 episoder

#Tech #Matias Madou

#25: Secure by design, threat modeling, and diversity of thought in security teams with Simon Cole

Software Security Gurus

published for 4 år siden

Del

MP3•Episode hjem

Want to nominate a guru? Get in touch! www.softwaresecuritygurus.com.

--- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message

26 episoder

#Tech #Matias Madou

Alle episoder

Software Security Gurus

1
Embedded systems software development, automotive security, and ASRG's global enthusiasts with Sven Schran 29:22

for 3 years siden29:22

29:22

In episode 26 of Software Security Gurus, Matias Madou chats to Sven Schran, Program Manager Security Engineering, at Robert Bosch. They discuss the rapidly growing embedded systems software industry, including the general security considerations during the development lifecycle. They also go in-depth on automotive security, where technological advancements and global demand shape an ever-evolving threat landscape. Finally, Sven gives us insight into ASRG, the community of automotive security enthusiasts that are making a splash all over the world. ‍-- Want to nominate a guru? Get in touch! www.softwaresecuritygurus.com Visit ASRG --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#25: Secure by design, threat modeling, and diversity of thought in security teams with Simon Cole 28:30

for 4 years siden28:30

28:30

Software Security Gurus

1
#24: Self-driving cars, automotive security modeling and integrated software with John Heldreth 34:52

for 4 years siden34:52

34:52

In episode 24 of Software Security Gurus, Matias Madou chats to John Heldreth, founder of the automotive security organization, ASRG. They discuss taking the plunge with self-driving cars, the complexities of automotive security modeling, digital twins, and integrated software. Want to nominate a guru? Get in touch with us! www.softwaresecuritygurus.com --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#23: Five steps to a better security culture, with Tanvi Bali 25:59

for 4 years siden25:59

25:59

In episode 23 of the Software Security Gurus webcast, Matias sits down with Tanvi Bali, a security expert and DevSecOps specialist. They discuss her background in engineering, and the state of DevSecOps in the APAC region (including why it trails behind Europe and US). She also treats us to her personal five steps to building a positive security culture within an organization. Want to nominate a guru? Get in touch! www.softwaresecuritygurus.com. Don't forget, you can also leave us a voice message: www.anchor.fm/softwaresecuritygurus --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#22: Implementing the right internal security structure, with Julie Tsai 25:48

for 4 years siden25:48

25:48

In episode 22 of Software Security Gurus, Matias Madou chats to Julie Tsai, Head of Information Security at Roblox. They discuss how to implement the right internal security structure, how to measure its success and quantify security risk, as well as how DevOps has evolved tactically to expand beyond tooling. Want to nominate a Guru? Get in touch: www.softwaresecuritygurus.com. --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#21: Security culture and adding security champions to enhance your program, with Brian Levine 25:46

for 4 years siden25:46

25:46

In episode 21 of Software Security Gurus, Matias Madou chats to Brian Levine, Senior Director, Product & Cloud Security at Axway. They discuss scaling a positive security culture and getting executive buy-in, adding security champions to enhance a program, as well as navigating an SSDLC the right way. Want to nominate a guru? Get in touch! www.softwaresecuritygurus.com --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#20: Why most security tools are not a cure-all for vulnerabilities, with Larry Maccherone 27:57

for 4 years siden27:57

27:57

In episode 20 of the Software Security Gurus webcast, Matias chats to Larry Maccherone, distinguished engineer and DevSecOps transformation lead at Comcast. They discuss the impact of people and culture on a successful DevSecOps adoption, why more security tools aren't a cure-all for finding and fixing vulnerabilities, as well as a deep dive into Larry's experience in pioneering the Build Security In initiative. Want to nominate a Guru? Get in touch with us! www.softwaresecuritygurus.com --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#19: Experiencing a big data breach, with Bankim Tejani 31:47

for 4 years siden31:47

31:47

Welcome to Software Security Gurus with Matias Madou. In episode 19, he chats to Bankim Tejani, Chief Security Architect and Distinguished Engineer at the Charles Schwab Corporation. They discuss his experience with big data breaches, as well as how secure coding can speed up remediation, and drive quality, performance, and scalability. Want to nominate a guru? Get in touch! www.softwaresecuritygurus.com. --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#18: Distributed security culture, with Brad Senetza 21:30

for 4 years siden21:30

21:30

Welcome to Software Security Gurus with Matias Madou. In episode 18, he chats with Brad Senetza, Security Assurance Architect at Oracle. They discuss his distributed security culture strategy, why it works, and how everyone in the SDLC can and should own security. Want to nominate a guru? Head to www.softwaresecuritygurus.com. --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#17: The secret ingredient to a successful "shift left", with Mike Shema 22:20

for 4 years siden22:20

22:20

Welcome to episode 17 of the Software Security Gurus webcast. In this interview, he chats with Mike Shema, Product Security at Square. They discuss his take on proactive security, and the how the relationship between deveopers and the security team impacts this approach. They also unpack the collaborative role these teams can play, and the secret ingredient to a successful shift left. Have you got a topic idea in mind, or want to nominate a guru? Get in touch! www.softwaresecuritygurus.com --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#14: The OWASP AppSensor Project, with John Melton 33:54

for 4 years siden33:54

33:54

Welcome to episode 14 of Software Security Gurus, with Matias Madou. This episode features a discussion with John Melton, Director of Product Security at NetSuite. He is also the co-leader of the visionary OWASP AppSensor Project. For more information, or to nominate a guest, please visit www.softwaresecuritygurus.com . --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#16: The "people over tools" approach to security, with Leif Dreizler 21:18

for 4 years siden21:18

21:18

Welcome to episode 16 of the Software Security Gurus podcast. In this interview, he chats with Leif Dreizler, Product Security Manager at Segment. They discuss his "people over tools" security approach, his team structure, as well as the fact that at Segment, cross-site scripting and SQL injection are extinct. Want to nominate a guru? Check out www.softwaresecuritygurus.com and get in touch. --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#15: Self-service and reducing cyber risk with Astha Singhal 16:44

for 4 years siden16:44

16:44

Welcome to episode 15 of the Software Security Gurus webcast. In this episode, Matias chats to Astha Singhal, Director of AppSec at Netflix. They discuss Netflix's enviable culture of freedom and responsibility, and what this means for application security in her team. They also dive into the world of self-service, and the impact this can have on reducing cyber risk. Finally, Astha talks about her unique experience as the leader of Salesforce's AppSec security program.‍ Want to nominate a speaker? Get in touch! Visit www.softwaresecuritygurus.com. --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#13: Four CISO tribes, and the changing approach to security training with Florence Mottay 19:28

for 5 years siden19:28

19:28

Welcome to episode 13 of Software Security Gurus, with Matias Madou. In this interview, he chats with Florence Mottay, security expert and Global CISO at Ahold Delhaize. They discuss her recent win of a prestigious industry award, and how this could positively influence cybersecurity transparency at the company level, as well as her experience in security training software and how the approach has changed over the years. Finally, Matias quizzes Flo on which of four CISO 'tribes' resonates with her way of working.‍ Want to hear more? Head to www.softwaresecuritygurus.com. --- Send in a voice message: https://podcasters.spotify.com/pod/show/softwaresecuritygurus/message…

Software Security Gurus

1
#12: Inspiring security awareness in developers, with Tanya Janca 17:24

for 5 years siden17:24