CSCP S03E07 - Jim Manico - Appsec in modern world and DevSecOps methodologies

Feb 20, 2022

35:00

forum

Ask episode

view_agenda

Chapters

auto_awesome

Transcript

info_circle

Episode notes

Is a pleasure to host again our good friend Jim.

Jim Manico is an AppSec enthusiast, educator, the Manicode founder, an investor, Java Champion, and an OWASP leader. This passionate conversation revolves around the new OWASP Top 10, reference architecture, threat modelling, SMS authentication, and TLS certificates.

The episode is brought you by AppSec Phoenix Ltd with the Phoenix platform you can make Vulnerability management for software and organization SMART. Follow the tag #appsecsmart

https://www.appsecphoenix.com get a free 30-day licence quoting CSCP https://landing.appsecphoenix.com/register

0:00 Introduction

0:28 Jim’s background

1:50 OWASP Top 10 Old and New

4:05 Secure design and threat modelling

9:55 Reference architecture

14:15 Follow through and scale

16:30 Security bugs

18:13 Authentication

24:32 JWT

27:45 TLS certificates

31:50 Zero trust