The Application Security Podcast
The Application Security Podcast
✓

Steve Springett -- Software and System Transparency

00:48:13
Podcasts
RSS
Link

TUNGKOL SA EPISODE NA ITO

Steve Springett, an expert in secure software development and a key figure in several OWASP projects is back. Steve unpacks CycloneDX and the value proposition of various BOMs. He gives us a rundown of the BOM landscape and unveils some new BOM projects that will continue to unify the security industry. Steve is a seasoned guest of the show so we learn a bit more about Steve's hobbies, providing a personal glimpse into his life outside of technology. 


Links from this episode:

https://cyclonedx.org/

Previous episodes with Steve Springett:
JC Herz and Steve Springett -- SBOMs and software supply chain assurance

Steve Springett — An insiders checklist for Software Composition Analysis

Steve Springett -- Dependency Check and Dependency Track

Book:
Software Transparency: Supply Chain Security in an Era of a Software-Driven Society by Chris Hughes and Tony Turner



FOLLOW OUR SOCIAL MEDIA:

➜ X: @AppSecPodcast
➜ LinkedIn: The Application Security Podcast
➜ YouTube: @ApplicationSecurityPodcast
➜ Instagram: @appsecpodcast
➜ Facebook: Application Security Podcast

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Teknolohiya
Edukasyon
Papaano
Ingles
Estados Unidos
Gamitin angAPIpara kunin ang episode na ito saJSON

SA EPISODE NA ITO

I-edit ang mga tag na ito

KOPYA NG SALIN 🔗

Are you the producer of this podcast? Add a podcast transcript
Need Audio-to-Text? Transcribe with Listen411 in Just 60 Seconds

I-SEARCH ANG MGA NAKARAANG EPISODE

I-search ang mga nakaraang episode ng The Application Security Podcast.
I-embed ang search bar na ito sa iyong website

IBA PANG MGA EPISOD SA PODCAST NA ITO

Isaac Evans - AppSec in the Age of AI

Isaac Evans - AppSec in the Age of AI

In this episode, we sit down with Isaac Evans, co-founder and CEO of Semgrep, to talk about how AI is reshaping application security faster than almost anyone expected. Isaac walks us through why CI is losing its place as the central security control point, replaced by deep background jobs that hun…
00:49:09
I-SHARE
IDAGDAG
José Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists

José Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists

In this episode, we sit down with Jose Carlos Chavez from Okta to break down the OWASP Top 10 for 2025 and what actually changed since 2021. We trace Jose's path from software engineering and observability into security, dig into why broken access control still holds the number one spot despit…
00:52:39
I-SHARE
IDAGDAG
The Future of Open-Source Threat Modeling

The Future of Open-Source Threat Modeling

This episode is sponsored by Corgea.Design it. Build it. Ship it. Corgea secures it.Learn more: Corgea.com You don’t have to let AI do the thinking for you. In this episode, Vikram shares why the smartest teams use AI as an accelerant — not a replacement — and why human judgment still matters most …
00:40:14
I-SHARE
IDAGDAG
AI Security: OWASP Meets Global Standards

AI Security: OWASP Meets Global Standards

AI security has no shortage of standards—but how do we turn them into practical guidance? Rob van der Veer explains how OWASP, the AI Exchange, and MOSAIC are coordinating global AI security efforts. We also explore responsible AI, agentic red teaming, vulnerability discovery, and how AI could leve…
00:47:54
I-SHARE
IDAGDAG
AI Pen Testing Killed Traditional DAST

AI Pen Testing Killed Traditional DAST

Is traditional DAST finally dead? James Berthoty explains how AI pentesting is changing the dynamics of security testing through contextual payloads, autonomous agents, and application-aware vulnerability discovery. We also explore token costs, AI-native security vendors, the future of bug bounties…
00:43:46
I-SHARE
IDAGDAG
Paunawa: Ang podcast at artwork na naka-embed sa page na ito ay mula sa Chris Romeo and Robert Hurlbut, na pag-aari ng may-ari nito at hindi kaakibat o ineendorso ng Listen Notes, Inc.
PROMOTED
Listen411.com: Lightning-fast Podcast Transcription and Summarization. Transcribe 1-hour audio in under 1 minute. Pay-as-you-go.
Listen411.com: Lightning-fast Podcast Transcription and Summarization. Transcribe 1-hour audio in under 1 minute. Pay-as-you-go.
Audio to Text

MGA REKOMENDASYON
Gamitin ang API para makuha ang episode na ito