CSCP S03EP14 - Brook Schoenfield - Appsec and History what have we learned so far

CSCP_S03EP14_-_Brook_Schoenfield_-_Appsec_and...

Brook Schoenfield is an Elder AppSec Diplomat, the author of seven books about software security and AppSec, a researcher, the builder and leader of four AppSec programs at major tech companies, and a Master Security Architect for consultancies. Brook talks about his long career path, concerns and hopes for the industry, and the importance of threat modelling. There are 27-28 million programmers on Earth, but Brook fears that only a million work in security.

The episode is brought to you by AppSec Phoenix Ltd with the Phoenix Security Cloud Platform, you can make vulnerability management for software and cloud SMART. Follow the tag #appsecsmart

https://www.appsecphoenix.com Get access today: https://appsecphoenix.com/demo

0:00 Introductions

4:00 27-28 mil programmers need for security

6:30 No silver bullet in software security

8:55 Brook’s career path into security

13:10 Bugs aren’t going anywhere

15:00 Next generation of InfoSec

21:06 Threat modelling, dynamic risk assessment

26:05 Story of threat modelling

28:06 Threat modelling tools

29:40 Beyond functionality, malicious attackers

32:30 Communicating with management