Sign up to save your podcasts
Or
Share AppSec Unlocked
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
AppSec Unlocked
By Edwin KwanTechnology
AppSec Unlocked episodes
- S2E2: Developer Security Training - Beyond Annual Compliance
Season 2: Training & Awareness
Episode 2: Developer Security Training - Beyond Annual Compliance
In our last episode, we talked about building an effective Security Champions program. Today, we're tackling something even bigger: How to make security training actually work for developers.
7 min - S2E1: Building a Security Champions Program That Actually Works
Season 2: Training & Awareness
Episode 1: Building a Security Champions Program That Actually Works
In this episode we'll talk about the most important security program you're not running correctly: The Security Champions program.
7 min - Season 2 Intro: Training and Awareness
Intro to Season 2 of AppSec Unlocked
Welcome to Season 2 where we're diving into something critical that often gets overlooked in the world of cybersecurity: Training and Awareness.
5 min - Help! There’s too many Vulnerabilities! A Practical Guide to Tackling Open-Source Security
Season 1: Open Source Security
Episode 11: Help! There’s too many Vulnerabilities! A Practical Guide to Tackling Open-Source Security
8 min - S1E10 - A FAIR Approach to Vulnerability Patch Prioritization
Season 1: Open Source Security
Episode 10: A FAIR Approach to Vulnerability Patch
PrioritizationIn this episode of AppSec Unlocked, we dive into the fascinating topic of using a FAIR approach to Vulnerability Patch prioritization, where we explore how organizations can better prioritize vulnerabilities in their open-source software using the FAIR model and EPSS. And we have Denny Wan, an expert on FAIR analysis sharing his insights on this innovative approach.
24 min - S1E9 - Open-Source Vulnerability Management Policy: A Balanced Approach
Season 1: Open Source Security
Episode 9: Open-Source Vulnerability Management Policy: A Balanced ApproachIn today's rapidly evolving cybersecurity landscape,
managing vulnerabilities in open-source components has become increasinglycomplex. While traditional approaches relying solely on CVSS scores have theirmerits, they may not be sufficient to address the exponential growth indiscovered vulnerabilities. A more nuanced and scalable approach is needed, onethat considers not only severity but also exploitability and potential impact.10 min - S1S8 - A Cautionary Tale on Supply Chain Attacks: My Recent Encounter with a Compromised NPM Library
Season 1: Open Source Security
Episode 8: A Cautionary Tale on Supply Chain Attacks: My Recent Encounter with a Compromised NPM LibraryThis is a rebroadcast from the CyberBites podcast as it is related to application security and open source supply chain.
6 min - S1E7 - Introduction to SSVC
Season 1: Open Source Security
Episode 7: Introduction to StakeholderSpecificVulnerability Categorization (SSVC)Introduction to a transformative risk-based approach to vulnerability management
- Why SSVC, especially when we already have CVSS
- How SSVC works and how to use it
- Challenges and considerations
- Real-world example
10 min - S1E6 - Software Composition Analysis Selection Criteria
Season 1: Open Source Security
Episode 6: Software Composition Analysis Selection Criteria
- The Language of Love (and Code)
- Accuracy: The Goldilocks Zone
- Speed: Because Time is Money (and Sanity)
- Remediation: The Path of Least Resistance
- User-Friendly: No Computer Science Degree Required
- Timing is Everything
- The Never-Ending Story
8 min - S1E5 - Embarking on the Open Source Security Journey
Season 1: Open Source Security
Episode 5: Embarking on the Open Source Security Journey.
- When Organisations Take the Leap
- The Crucial Role of Awareness and Buy-in
- The First Steps: Gaining Visibility
- Key Takeaways for a Successful Program
- Practical Steps and Resources
8 min
About AppSec Unlocked
From the publisher's feed
AppSec Unlocked is your key to understanding the complex world of application security. Whether you're a seasoned security professional, a curious developer, or somewhere in between, join us as we…
demystifies application security one episode at a time.