Attack Surface Management, Monitoring, & Mapping - Jeff Foley - ESW #219 | Security Weekly Podcast Network (Video) Podcast

Attack Surface Management, Monitoring, & Mapping - Jeff Foley - ESW #219: The OWASP Amass Project has developed a tool to help information security professionals perform network mapping of attack surfaces and perform external asset discovery using open source information gathering and active reconnaissance techniques.... by Enterprise Security Weekly (Video)

26 min listen

Starting an OWASP Project (That's Not a List!) - Grant Ongers - ASW #272: We can't talk about OWASP without talking about lists, but we go beyond the lists to talk about a product security framework. Grant shares his insights on what makes lists work (and not work). More importantly, he shares the work he's doing to... by Security Weekly Podcast Network (Audio)

74 min listen

Typosquatting, Curl's Security Update, & OpenSSF's 10 Point Mobilization Plan - ASW #197: This week in the AppSec News: Typosquatting spreads to Rust, curl fixes flaws in mishandling dots and slashes, OpenSSF invests in a mobilization plan for open source, interesting appsec from Black Hat Asia. Visit for all the latest episodes!... by Application Security Weekly (Video)

40 min listen

Typosquatting, Curl's Security Update, & OpenSSF's 10 Point Mobilization Plan - ASW #197: This week in the AppSec News: Typosquatting spreads to Rust, curl fixes flaws in mishandling dots and slashes, OpenSSF invests in a mobilization plan for open source, interesting appsec from Black Hat Asia. Visit for all the latest... by Security Weekly Podcast Network (Video)

40 min listen

Starting an OWASP Project (That's Not a List!) - Grant Ongers - ASW #272: We can't talk about OWASP without talking about lists, but we go beyond the lists to talk about a product security framework. Grant shares his insights on what makes lists work (and not work). More importantly, he shares the work he's doing to... by Security Weekly Podcast Network (Video)

38 min listen

Starting an OWASP Project (That's Not a List!) - Grant Ongers - ASW #272: We can't talk about OWASP without talking about lists, but we go beyond the lists to talk about a product security framework. Grant shares his insights on what makes lists work (and not work). More importantly, he shares the work he's doing to... by Application Security Weekly (Video)

38 min listen

Attack Surface Mapping w/ AMASS - PSW #694: Learn how to use Amass to collect information about your Internet exposed assets. We'll cover usage of the configuration file (heavily), then put it altogether by integrating Nmap and a screenshot tool called Eyewitness. Visit for all the... by Security Weekly Podcast Network (Video)

54 min listen

Open Source Endpoint Security with Osquery & Fleet - Zach Wasserman - PSW #714: The world's top tech organizations are pursuing an open-source endpoint security strategy using osquery. We will dig into how osquery and Fleet can enable observation, collection, and investigation on endpoints. This open-source strategy eases... by Security Weekly Podcast Network (Video)

54 min listen

Skills & Knowledge - ASW #167: This week, we welcome Anita D'Amico, VP, Market Development at Synopsys, and Patrick Carey, Senior Director of Product Marketing at Synopsys, to discuss AppSec Orchestration/Correlation & DevSecOps Efficiency! In the AppSec News: The Great Leak... by Security Weekly Podcast Network (Audio)

72 min listen

wasmCloud - Distributed Computing With WebAssembly - Liam Randall - ASW #175: CNCF wasmCloud helps developers to build distributed microservices in WebAssembly that they can run across clouds, browsers, and everywhere securely. Segment Resources: - - Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

34 min listen

wasmCloud - Distributed Computing With WebAssembly - Liam Randall - ASW #175: CNCF wasmCloud helps developers to build distributed microservices in WebAssembly that they can run across clouds, browsers, and everywhere securely. Segment Resources: - - Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

34 min listen

Working With OpenVAS - PSW #708: Gain some insights into the OpenVAS project, why you might want to use it and some of the best implementations. This segment will dive right into the extended setup by compiling OpenVAS, and all components, from source code. Visit for all the... by Security Weekly Podcast Network (Video)

41 min listen

Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254: Zed Attack Proxy is an essential tool for web app pentesting. The project just recently moved from OWASP to the Secure Software Project. Hear about the challenges of running an OSS security project, why Simon got involved in the first place, and why... by Security Weekly Podcast Network (Audio)

73 min listen

ASW #224 - Keith Hoodlet: How do you mature a team responsible for securing software? What are effective ways to prioritize investments? We'll discuss a set of posts on building talent, building capabilities, and what mature teams look like. Segment resources: - ... by Security Weekly Podcast Network (Audio)

77 min listen

Navigating the Complexities of Development to Create Secure APIs with Kristen Bell - Kristen Bell - ASW #248: Appsec teams and developers must both understand the consequences of what they're doing when building APIs. Appsec teams need to push for collaboration and help implement tools that augment the development process. Dev teams need to wrangle complex... by Application Security Weekly (Video)

38 min listen

Navigating the Complexities of Development to Create Secure APIs with Kristen Bell - Kristen Bell - ASW #248: Appsec teams and developers must both understand the consequences of what they're doing when building APIs. Appsec teams need to push for collaboration and help implement tools that augment the development process. Dev teams need to wrangle complex... by Security Weekly Podcast Network (Video)

38 min listen

How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107 by Application Security Weekly (Video)

37 min listen

How Can Security Work TOGETHER, Not Against, Developers - Joe Garcia - ASW #107: DevOps and Agile IT practices have been around for a while. However, security teams are just now catching up. We will discuss how security teams can stop being “showstoppers” for the developers and actually work with them, not against them. Focus... by Security Weekly Podcast Network (Video)

37 min listen

DevOps-First Application Security For Mid-Markets - Sundar Krish - ASW #119: Mid-markets do have AppSec expertise, the current AppSec products are focused on large enterprises and require AppSec expertise. Sken.ai is the new and the only AppSec scan tool, focused on mid-markets where DevOps can get started without any AppSec... by Application Security Weekly (Video)

35 min listen

DevOps-First Application Security For Mid-Markets - Sundar Krish - ASW #119: Mid-markets do have AppSec expertise, the current AppSec products are focused on large enterprises and require AppSec expertise. Sken.ai is the new and the only AppSec scan tool, focused on mid-markets where DevOps can get started without any AppSec... by Security Weekly Podcast Network (Video)

35 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Audio)

74 min listen

Azure App Service & Cloud-Native Signal Sciences Deployments - Alfred Chung - ASW #128: Discussing what enterprises have to do while adapting legacy apps in to Azure, while doing in a secure, steady way without leaving any gaps. Signal Sciences site extension makes sure your apps are covered across the board, and will protect any app in... by Security Weekly Podcast Network (Video)

35 min listen

Azure App Service & Cloud-Native Signal Sciences Deployments - Alfred Chung - ASW #128: Discussing what enterprises have to do while adapting legacy apps in to Azure, while doing in a secure, steady way without leaving any gaps. Signal Sciences site extension makes sure your apps are covered across the board, and will protect any app in... by Application Security Weekly (Video)

35 min listen

Security Product Metrics, ML 101, PEACH for Cloud, Log4Shell Lookback, Appsec Tools - ASW #224: Metrics for building a security product, hands-on image classification attacks, a proposed PEACH framework for cloud isolation, looking back at Log4Shell, building an appsec toolbox Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

36 min listen

Security Product Metrics, ML 101, PEACH for Cloud, Log4Shell Lookback, Appsec Tools - ASW #224: Metrics for building a security product, hands-on image classification attacks, a proposed PEACH framework for cloud isolation, looking back at Log4Shell, building an appsec toolbox Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

36 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Application Security Weekly (Video)

40 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Video)

40 min listen

Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254: Zed Attack Proxy is an essential tool for web app pentesting. The project just recently moved from OWASP to the Secure Software Project. Hear about the challenges of running an OSS security project, why Simon got involved in the first place, and why... by Security Weekly Podcast Network (Video)

37 min listen

Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254: Zed Attack Proxy is an essential tool for web app pentesting. The project just recently moved from OWASP to the Secure Software Project. Hear about the challenges of running an OSS security project, why Simon got involved in the first place, and why... by Application Security Weekly (Video)

37 min listen

ASW #212 - Sam Placette: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Audio)

82 min listen

Discover this podcast and so much more

Attack Surface Management, Monitoring, & Mapping - Jeff Foley - ESW #219

Attack Surface Management, Monitoring, & Mapping - Jeff Foley - ESW #219

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes