ဤအပိုင်းအကြောင်း
As more developers turn to LLMs to generate code, more appsec teams are turning to LLMs to conduct security code reviews. One of the biggest themes in all the discussion around LLMs, agents, and code is speed -- more code created faster. James Wickett shares why speed continues to pose a challenge to appsec teams and why that's often because teams haven't invested enough in foundational appsec principles.
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-372
အင်္ဂလိပ်
အမေရိကန်ပြည်ထောင်စု
ကူးယူချက် 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
ပြီးခဲ့သည့် အပိုင်းများကို ရှာဖွေပါ
Application Security Weekly (Audio) ၏ ယခင်အပိုင်းများကို ရှာဖွေပါ
ဤ PODCAST တွင် အခြားသော အပိုင်းများ
There's already an increase in volume of security flaws found by LLMs. And orgs are already turning to LLMs to write code. So, what happens when orgs lean on LLMs to create patches for those security flaws? Keith Hoodlet gives an exclusive early look at his team's recent research into the success, …
Sandboxing, least privilege, and monitoring are well-established controls in terms of the defenses they provide against unexpected and unauthorized actions. But being well-established in theory doesn't always translate to successful in practice. Kieran Human talks about some of the properties that …
Finding flaws has always been a focus of appsec. And now with open source projects and open weight models orgs have modern tools to review code and conduct pentests. Rishi Sharma describes the motivation behind creating a platform of LLM-driven security tools and the effective ways to keep the tool…
All sorts of cybersecurity disciplines are adopting agents to help humans save time and automate routine activities. Sai Kiran Uppu describes his work on creating a platform for agents to analyze external threat intel, examine internal systems, and present triage decisions to operators. This type o…
Orgs need to be able to use agents, MCPs, and LLMs in ways that don't lead to unexpected actions and undesirable outcomes. The OWASP Agent Security Regression Harness project is an approach for defining customizable scenarios and testing whether those systems fail against known security threats. Me…
မသက်ဆိုင်ကြောင်းရှင်းလင်းချက်: ဤစာမျက်နှာပေါ်တွင် ထည့်သွင်းထားသော ပေါ့တ်ကာစ်နှင့် အနုပညာလက်ရာများသည် ၎င်း၏ပိုင်ရှင်၏ပိုင်ဆိုင်မှုဖြစ်သည့် Mike Shema မှဖြစ်ပြီး Listen Notes, Inc နှင့် ဆက်နွှယ်ခြင်း သို့မဟုတ် ထောက်ခံထားခြင်းမရှိပါ။
ပြင်ဆင်ပါ
ပေါ့ဒ်ကတ်စ် ဒေတာဘေ့စ်ကို နောက်ဆုံးပေါ်အချိန်နှင့်တပြေးညီဖြစ်စေရန် ကူညီပေးသည့်အတွက် ကျေးဇူးတင်ပါသည်။
