no dogma podcast
#175 Tanya Janca, Secure Coding
Jan 7, 2025
In this engaging discussion, Tanya Janca, Head of Community at Semgrep and security trainer at She Hacks Purple, shares insights from her new book aimed at helping developers write secure code. She emphasizes the critical importance of validating inputs and adopting a zero-trust security model. Tanya discusses balancing security with usability, especially in sensitive environments like hospitals. She also explores effective strategies for securing legacy applications and the need for continuous security testing in the software development lifecycle.
48:32
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Tanya Janca emphasizes the importance of educating developers on secure coding practices to foster a healthier security culture in software development.
- The podcast discusses the zero trust security model, highlighting its role in continuously validating system connections to mitigate vulnerabilities.
Deep dives
Focus on Secure Coding for Developers
The new book by Tanya Janka aims to educate software developers on secure coding practices, diverging from her previous work tailored for security professionals. It emphasizes the need for developers to understand the intricacies of secure application development while providing practical examples and code-centric advice. By centering on coding practices, the book aims to foster a healthier security culture within the development community. Janka stresses that targeting developers is crucial since they are the primary creators of software and play a key role in addressing security vulnerabilities.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
