Tag: Appsec

SE-Radio Episode 330: Natalie Silvanovich on Attack Surface Reduction

Filed in Episodes by on July 17, 2018 0 Comments
SE-Radio Episode 330: Natalie Silvanovich on Attack Surface Reduction

Natalie Silvanovich from Google Project Zero talks with Kim Carter about what attack surface is in regards to software, how to identify risks and reduce the attack surface of the software you as a Software Engineer are creating. Natalie found over 100 0 day security defects in flash in her first year at Google, and […]

Continue Reading »

SE-Radio Episode 321: Péter Budai on End to End Encryption

Filed in Episodes by on April 10, 2018 1 Comment
SE-Radio Episode 321: Péter Budai on End to End Encryption

Head of Cryptography Engineering at Tresorit, Péter Budai talks with Kim Carter about End to End Encryption (E2EE), backdoors, the scenarios where E2EE can be and should be used. IM, Voice over IP, Email scenarios, as well as interservice communication scenarios such as securing data in use with full memory encryption, CPU-based key storage, enclaves, […]

Continue Reading »

SE-Radio Episode 314: Scott Piper on Cloud Security

Filed in Episodes by on January 16, 2018 0 Comments
SE-Radio Episode 314: Scott Piper on Cloud Security

Founder of Summit Route / creator of FLAWS, Scott Piper talks with Kim Carter about Cloud Security. Covering the often misunderstood Shared Responsibility Model. Kim and Scott discuss how our assets have changed, and what the risks and countermeasures are with the exodus to the Cloud. A selection of techniques are discussed on how we […]

Continue Reading »

SE-Radio Episode 309: Zane Lackey on Application Security

Filed in Episodes by on November 14, 2017 0 Comments
SE-Radio Episode 309: Zane Lackey on Application Security

Founder of Signal Sciences Zane Lackey talks with Kim Carter about Application Security around what our top threats are today, culture, threat modelling, and visibility, and how we can improve our security stature as Software Engineers.   Related Links Web Application Security: Threats, Countermeasures, and Pitfalls Network Security with Haroon Meer Docker Security with Diogo […]

Continue Reading »