Threat Modeling in AppSec – Avi Douglen – ASW #105
This week, we welcome Avi Douglen, Founder and CEO of Bounce Security, to talk about Threat Modeling in Application Security, DevSecOps, and how Application Security is mapping Security culture!
AviD is a prominent security architect and software developer, with decades of experience leading development teams in building secure products and protecting complex systems. He has enjoys researching efficient security engineering, usable security, and scaling enterprise security systems. He founded Bounce Security to focus on bringing his own brand of efficient software security to a wider range of technology companies and software developers. Mr. Douglen is a frequent trainer and speaker at industry conferences, such as OWASP, RSA, BSides, and InfoSec, as well as developer conferences such as O’Reilly, DevSecCon, PyCon, and DevOpsDays.
Nintendo Breach, NSA Advisory, & Security of IoMT – ASW #105
This week, in the Application Security News, Nintendo Confirms Breach of 160,000 Accounts via a legacy endpoint, NSA shares list of vulnerabilities commonly exploited to plant web shells, Code Patterns for API Authorization: Designing for Security, Health Prognosis on the Security of IoMT Devices? Not Good, and 8 Tips to Create an Accurate and Helpful Post-Mortem Incident Report!
