CycloneDX 1.5: The missing link in SBOMs and software transparency?
CycloneDX — one of the most popular standards for describing the components of a software application, including source code binaries, libraries and containers — was created because modern software is a glued-together glob of third-party and open-source components that are rigged up “in complex and…
SBOMs & CycloneDX with Steve Springett
Steve Springett is the Chair of the OWASP CycloneDX Core Working Group. CycloneDX is one of the two main machine readable formats that SBOMs are being created in, although CycloneDX can capture all sorts of BOMs.
In this episode we assume listeners know what a SBOM is and why it might be desired b…
CSCP S4EP03 - Steve Springett - To BOM or to SBOM this is the question
Steve Springett is the Director of Product Security at ServiceNow, helping 4,000+ developers build secure and resilient software. He’s a leader of multiple OWASP projects including Dependency Track, SCVS, and Cyclone DX. In this conversation, Steve and Francesco discuss the term SBOM (software…
Steve Springett -- Software and System Transparency
Steve Springett, an expert in secure software development and a key figure in several OWASP projects is back. Steve unpacks CycloneDX and the value proposition of various BOMs. He gives us a rundown of the BOM landscape and unveils some new BOM projects that will continue to unify the security indu…
Quarkus Insights #188: CycloneDX SBOMs with Quarkus and OWASP DependencyTrack
Alexey Loubyansky, Niklas Duester, & Steve Springett join us to discuss generating Quarkus application SBOMs for vulnerability management with OWASP DependencyTrack.
EP06 - Transparency & Compliance: How to Secure AI Supply Chains
What happens when a decade of software supply chain security expertise meets AI's unprecedented challenges?
Steve Springett, 𝗩𝗶𝗰𝗲 𝗖𝗵𝗮𝗶𝗿 of the 𝗢𝗪𝗔𝗦𝗣 𝗙𝗼𝘂𝗻𝗱𝗮𝘁𝗶𝗼𝗻 and 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿 𝗼𝗳 𝗣𝗿𝗼𝗱𝘂𝗰𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 at 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝗡𝗼𝘄, reveals why traditional AppSec frameworks can't secure AI systems.
From pioneering SBOM ini…
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363
In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363
In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363
In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …
AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363
In an era dominated by AI-powered security tools and cloud-native architectures, are traditional Web Application Firewalls still relevant? Join us as we speak with Felipe Zipitria, co-leader of the OWASP Core Rule Set (CRS) project. Felipe has been at the forefront of open-source security, leading …
PODCAST SÖKMOTOR
Du kan använda vår webbplats för att söka efter3,831,372podcaster och196,774,093avsnitt efter personer, platser eller ämnen.
If I have seen further than others, it is by listening to podcasts and standing upon the shoulders of
giants.
‐ Isaac "Llamacorn" Newton
REDIGERA
Tack för att du hjälper till att hålla databasen över podcaster uppdaterad.
