Security Weekly Podcast Network (Video)
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321
Mar 11, 2025 · 40 min · 183.1 MB
0:00-40:34
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Just three months into 2025 and we already have several hundred CVEs for XSS and SQL injection. Appsec has known about these vulns since the late 90s. Common defenses have been known since the early 2000s. Jack Cable talks about CISA's Secure by Design principles and how they're trying to refocus businesses on addressing vuln classes and prioritizing software quality -- with security one of those important dimensions of quality.
Segment Resources:
- https://www.cisa.gov/securebydesign
- https://www.cisa.gov/securebydesign/pledge
- https://www.cisa.gov/resources-tools/resources/product-security-bad-practices
- https://www.lawfaremedia.org/projects-series/reviews-essays/security-by-design
- https://corridor.dev
Show Notes: https://securityweekly.com/asw-321
https://corridor.dev
corridor.devhttps://securityweekly.com/asw-321
securityweekly.com