Sign up to save your podcasts
Or
Share Security Science
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Security Science
By Dan MellingerTechnology
Security Science episodes
- Establishing Defender Advantage w/ Cyentia Institute
We tackle a hotly contested debate as old as cybersecurity itself: does releasing exploit code do more harm than good?
1 hr 11 min - How CIOs Get Things Done
We interview Collin Boyce, Chief Information Officer for the City of Tucson, Arizona and discuss his process of turning impossible ideas into real projects that achieve meaningful results.
35 min - Counting CVEs
Dive into a quick history of the CVE List as we kick off a quarterly update that tracks the progress of new CVEs issued.
23 min - Vulnerability Disclosure and Responsible Exposure
We discuss and add some quantifiable data to a hot-button issue in the cybersecurity industry: responsible disclosure of vulnerabilities and exploits.
35 min - Risk, Measured: 7 Characteristics of Good Metrics
Continuing our miniseries into Risk, Measured: we go back to statistics class and discuss some of the characteristics of good metrics to help people understand what you should be looking for when you want to meaningfully quantify cybersecurity phenomena, program performance, or anything really.
46 min - Why Vulnerability Scores Can’t Be Looked At In A Vacuum
Sometimes a number is just a number. Context - the information and environment around the number - is what really matters. We discuss how this concept holds especially true in vulnerability management and risk scoring.
23 min - More Blue Team Voices
We discuss the general lack of defensive perspectives in cybersecurity media and culture, how that impacts perceptions and decision making, and what we can do about it.
31 min - Risk, Measured: Power Laws and Security
We discuss the application of power law distributions in cybersecurity.
34 min - Github as a Source for Exploits?We look at the phenomena of exploit code moving from traditional and cybersecurity-centric databases like Exploit-DB and Metasploit and instead being published on Github. Is Github becoming a de facto database for exploit code?39 min
- A Walk Down Vulnerability LaneKenna Security recently celebrated its 10-year anniversary on Dec. 10th, 2020; so we decided to do what we do best and take a data-based (and rare) review of the top vulnerabilities from the past decade, year-by-year.53 min
About Security Science
From the publisher's feed
Cybersecurity shouldn’t be a black box. Security Science aims to demystify cybersecurity with education combined with a dose of entertainment. We will tap a mix of experts to tackle the gamut of…
security topics - from the (mis)use of AI to deep analysis of specific vulnerabilities - grounding out each episode with measurable outcomes or joking around when there is a lack thereof.