CSCP S03E07 - Jim Manico - Appsec in modern world and DevSecOps methodologies

CSCP_S03E07_-_Jim_Manico_-_Appsec_Magic_In_mo...

Is a pleasure to host again our good friend Jim.

Jim Manico is an AppSec enthusiast, educator, the Manicode founder, an investor, Java Champion, and an OWASP leader. This passionate conversation revolves around the new OWASP Top 10, reference architecture, threat modelling, SMS authentication, and TLS certificates.

The episode is brought you by AppSec Phoenix Ltd with the Phoenix platform you can make Vulnerability management for software and organization SMART. Follow the tag #appsecsmart

https://www.appsecphoenix.com get a free 30-day licence quoting CSCP https://landing.appsecphoenix.com/register

0:00 Introduction

0:28 Jim’s background

1:50 OWASP Top 10 Old and New

4:05 Secure design and threat modelling

9:55 Reference architecture

14:15 Follow through and scale

16:30 Security bugs

18:13 Authentication

24:32 JWT

27:45 TLS certificates

31:50 Zero trust