# Steve Springett

قسمت های برتر پادکست
به روز شده:

CycloneDX 1.5: The missing link in SBOMs and software transparency?

CycloneDX — one of the most popular standards for describing the components of a software application, including source code binaries, libraries and containers — was created because modern software is a glued-together glob of third-party and open-source components that are rigged up “in complex and…

SBOMs & CycloneDX with Steve Springett

Steve Springett is the Chair of the OWASP CycloneDX Core Working Group. CycloneDX is one of the two main machine readable formats that SBOMs are being created in, although CycloneDX can capture all sorts of BOMs. In this episode we assume listeners know what a SBOM is and why it might be desired b…

CSCP S4EP03 - Steve Springett - To BOM or to SBOM this is the question

  Steve Springett is the Director of Product Security at ServiceNow, helping 4,000+ developers build secure and resilient software. He’s a leader of multiple OWASP projects including Dependency Track, SCVS, and Cyclone DX. In this conversation, Steve and Francesco discuss the term SBOM (software…

Steve Springett -- Software and System Transparency

Steve Springett, an expert in secure software development and a key figure in several OWASP projects is back. Steve unpacks CycloneDX and the value proposition of various BOMs. He gives us a rundown of the BOM landscape and unveils some new BOM projects that will continue to unify the security indu…

Quarkus Insights #188: CycloneDX SBOMs with Quarkus and OWASP DependencyTrack

Alexey Loubyansky, Niklas Duester, & Steve Springett join us to discuss generating Quarkus application SBOMs for vulnerability management with OWASP DependencyTrack.

EP06 - Transparency & Compliance: How to Secure AI Supply Chains

What happens when a decade of software supply chain security expertise meets AI's unprecedented challenges? Steve Springett, 𝗩𝗶𝗰𝗲 𝗖𝗵𝗮𝗶𝗿 of the 𝗢𝗪𝗔𝗦𝗣 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻 and 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿 𝗼𝗳 𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 at 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝗡𝗼𝘄, reveals why traditional AppSec frameworks can't secure AI systems. From pioneering SBOM ini…

AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363

In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …

AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363

In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …

AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363

In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …

AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363

In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …