The Application Security Podcast
The Application Security Podcast
✓

Steve Springett -- Software and System Transparency

00:48:13
Podcasts
RSS
Link

ОБ ЭТОМ ЭПИЗОДЕ

Steve Springett, an expert in secure software development and a key figure in several OWASP projects is back. Steve unpacks CycloneDX and the value proposition of various BOMs. He gives us a rundown of the BOM landscape and unveils some new BOM projects that will continue to unify the security industry. Steve is a seasoned guest of the show so we learn a bit more about Steve's hobbies, providing a personal glimpse into his life outside of technology. 


Links from this episode:

https://cyclonedx.org/

Previous episodes with Steve Springett:
JC Herz and Steve Springett -- SBOMs and software supply chain assurance

Steve Springett — An insiders checklist for Software Composition Analysis

Steve Springett -- Dependency Check and Dependency Track

Book:
Software Transparency: Supply Chain Security in an Era of a Software-Driven Society by Chris Hughes and Tony Turner



FOLLOW OUR SOCIAL MEDIA:

➜ X: @AppSecPodcast
➜ LinkedIn: The Application Security Podcast
➜ YouTube: @ApplicationSecurityPodcast
➜ Instagram: @appsecpodcast
➜ Facebook: Application Security Podcast

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Технология
Образование
Cómo se hace
английский
США
ИспользуйтеAPI, чтобы загрузить этот эпизод вJSON.

В ЭТОМ ЭПИЗОДЕ

Изменить эти теги

РАСШИФРОВКА 🔗

Are you the producer of this podcast? Add a podcast transcript
Need Audio-to-Text? Transcribe with Listen411 in Just 60 Seconds

ПОИСК ПРОШЛЫХ ЭПИЗОДОВ

Искать прошлые эпизоды The Application Security Podcast.
Вставьте эту панель поиска на свой сайт

ДРУГИЕ ЭПИЗОДЫ В ЭТОМ ПОДКАсте

AI Security: OWASP Meets Global Standards

AI Security: OWASP Meets Global Standards

AI security has no shortage of standards—but how do we turn them into practical guidance? Rob van der Veer explains how OWASP, the AI Exchange, and MOSAIC are coordinating global AI security efforts. We also explore responsible AI, agentic red teaming, vulnerability discovery, and how AI could leve…
00:47:54
ПОДЕЛИТЬСЯ
СОХРАНИТЬ
José Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists

José Carlos Chávez - When Museums Get Hacked: OWASP Top 10 Lessons from Heists

In this episode, we sit down with Jose Carlos Chavez from Okta to break down the OWASP Top 10 for 2025 and what actually changed since 2021. We trace Jose's path from software engineering and observability into security, dig into why broken access control still holds the number one spot despit…
00:52:39
ПОДЕЛИТЬСЯ
СОХРАНИТЬ
The Future of Open-Source Threat Modeling

The Future of Open-Source Threat Modeling

This episode is sponsored by Corgea.Design it. Build it. Ship it. Corgea secures it.Learn more: Corgea.com You don’t have to let AI do the thinking for you. In this episode, Vikram shares why the smartest teams use AI as an accelerant — not a replacement — and why human judgment still matters most …
00:40:14
ПОДЕЛИТЬСЯ
СОХРАНИТЬ
Isaac Evans - AppSec in the Age of AI

Isaac Evans - AppSec in the Age of AI

In this episode, we sit down with Isaac Evans, co-founder and CEO of Semgrep, to talk about how AI is reshaping application security faster than almost anyone expected. Isaac walks us through why CI is losing its place as the central security control point, replaced by deep background jobs that hun…
00:49:09
ПОДЕЛИТЬСЯ
СОХРАНИТЬ
AI Pen Testing Killed Traditional DAST

AI Pen Testing Killed Traditional DAST

Is traditional DAST finally dead? James Berthoty explains how AI pentesting is changing the dynamics of security testing through contextual payloads, autonomous agents, and application-aware vulnerability discovery. We also explore token costs, AI-native security vendors, the future of bug bounties…
00:43:46
ПОДЕЛИТЬСЯ
СОХРАНИТЬ
Отказ от ответственности: Подкаст и иллюстрации, встроенные в эту страницу, взяты из Chris Romeo and Robert Hurlbut, который является собственностью его владельца и не связан или не одобрен Listen Notes, Inc.
PROMOTED
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
Bid on eBay

РЕКОМЕНДАЦИИ
Используйте API, чтобы скачать этот эпизод