By Thomas Erl In this episode Tim interviews Thomas Erl, the world's top selling author on service-oriented architecture (SOA). Discussion topics include the basics of SOA and how the SOASchool.com certification program works. | 10:50 | May 6, 2010 |  |
By James A. Whittaker James Whittaker provides an overview of Exploratory Testing--the subject of his latest book. Learn about ways to explore your application with intent, strategy, and tactics that find bugs and validate functionality. | 1:47 | Dec 29, 2008 |  |
By Adam Shostack Adam Shostack discusses he state of Software Quality with James Whittaker. Learn about the current transition from testing infrastructure to testing business logic. | 14:36 | Dec 22, 2008 |  |
By Adam Shostack Adam Shostack discusses the future of software testing with James Whittaker. Learn about the evolution of software testing methodologies and where the exploratory testing industry is heading. | 12:15 | Dec 22, 2008 |  |
By Adam Shostack Adam Shostack dives deep into security testing methodologies with How to Break Software Security author James Whittaker. | 8:56 | Dec 22, 2008 |  |
By Adam Shostack Adam Shostack discusses the crisis of credibility today in security. Learn about how this lack of credibility is driven by the fear economy. | 5:46 | Dec 17, 2008 |  |
By Adam Shostack Adam Shostack presents real-world solutions to fix the crisis of information security. Learn about ways to address the economy of fear from a sociologic, psychological, and anthropological perspective. | 6:29 | Dec 17, 2008 |  |
By Adam Shostack Adam Shostack offers specific steps to resolve the current crises in information security. Learn what academia, security professionals, and vendors can do to improve information security. | 6:09 | Dec 17, 2008 |  |
By Adam Shostack Adam Shostack and Ben Rothke discuss the crisis in information Security, and Adam's new book "The New School of Information Security." | 10:54 | Oct 28, 2008 |  |
By Adam Shostack Adam Shostack and Ben Rothke continue their discussion of Adam's new book, "The New School of Information Security." Learn why the security data you have doesn’t support effective decision-making, and what to do about it. | 8:31 | Oct 28, 2008 |  |
By Adam Shostack Adam Shostack and Ben Rothke continue their discussion of Adam's new book, "The New School of Information Security." Learn why it’s so hard to improve security in isolation, and how the entire industry can make it happen and evolve. | 13:08 | Oct 28, 2008 |  |
By Scott Matsumoto Scott Matsumoto discusses why application developers should care about security. Learn about secure coding patterns, threat modeling, and defensive coding. | 11:34 | Oct 14, 2008 |  |
By Scott Matsumoto Scott Matsumoto discusses why and how to introduce security into your software development lifecycle. Learn why anyone involved in designing, coding, specifying, or testing software needs to be concerned about software security. | 9:46 | Oct 7, 2008 |  |
By Greg Conti As we enter the era of cloud computing, it is vitally important to consider the risks of sharing our data with third parties. Greg Conti and Ben Rothke examine these risks and the privacy implications of popular online tools and services. | 22:44 | Oct 7, 2008 |  |
By Greg Conti In part 2, Ben Rothke and Greg Conti continue their discussion of the risks of sharing data with third parties in the cloud computing era. | 13:41 | Oct 7, 2008 |  |
By Phillip Hallam-Baker, Ben Rothke Phillip Hallam-Baker discusses his new book “The dotCrime Manifesto,” and presents a plan for implementing accountability-driven security infrastructure to create a safer Internet without sacrificing power, ubiquity, simplicity, flexibility, or privacy. | 13:44 | Sep 17, 2008 |  |
By Ben Rothke, Phillip Hallam-Baker Phillip Hallam-Baker continues the discussion of his book "The dotCrime Manifesto" with Ben Rothke. Learn about accountability as it pertains to stopping phishing, spam, and botnets. Part 2 of 3. | 15:42 | Sep 17, 2008 |  |
By Phillip Hallam-Baker, Ben Rothke Phillip Hallam-Baker discusses key components of his book "The dotCrime Manifesto" with Ben Rothke. Learn strategies and tactics for reconstructing the Internet to ensure it resists online crime and how we can started building the “Accountable Web.” | 22:29 | Sep 17, 2008 |  |
By Raffael Marty Martin McKeay discusses Raffael Marty's new book, Applied Security Visualization. Learn concepts, techniques, and tools you need to use visualization on your network. | 9:26 | Aug 20, 2008 |  |
By Julia H. Allen, Gary McGraw Gary McGraw and Julia Allen discuss the state of the practice of Software Security and how to integrate security practices into your software development life-cycle. | 20:27 | Aug 20, 2008 |  |
By Julia H. Allen CERT senior researcher Julia Allen and Bill Pollack discuss why business leaders need to start paying attention to software security. | 0:16:41 | Jul 25, 2008 |  |
By Julia H. Allen, Nancy R. Mead Nancy Mead and Julia Allen, of CERT's research efforts in security requirements engineering, discuss why it's important to identify software security requirements early in the software development life cycle (SDLC) and practices for getting started. | 0:22:56 | Jul 25, 2008 |  |
By Niels Provos Niels Provos and Thorsten Holz, authors of the most authoritative book in the field, discuss the advantages of virtual Honeypots. | 13:41 | Jul 16, 2008 |  |
By Zulfikar Ramzan Symantec’s Zulfikar Ramzan, author of “Crimeware: Understanding New Attacks and Defenses,” discusses silent, stealthy, profit-driven online threats. Learn about the technological, social, psychological, & economic aspects of this problem. | 0:13:49 | May 21, 2008 |  |
By Zulfikar Ramzan Zulfikar Ramzan, author of, “Crimeware: Understanding New Attacks and Defenses,” guides you through essential security principles, techniques, & countermeasures to keep you one step ahead of the criminals, regardless of evolving technology and tactics. | 0:15:23 | May 21, 2008 |  |
By David Rice You’re a crash test dummy for software manufacturers. You have little, if any, meaningful consumer protection. Why? "Geekonomics" author David Rice discusses how current market incentives might be changed to protect you & your identity with Ben Rothke. | 00:20:20 | Apr 3, 2008 |  |
By David Rice In part 2 of this three-part audio podcast series, "Geekonomics: The Real Cost of Insecure Software" author David Rice and Ben Rothke discuss the "cement" metaphor as it pertains to software security. | 00:19:21 | Apr 3, 2008 |  |
By David Rice In part 3 of this three-part audio podcast series, "Geekonomics: The Real Cost of Insecure Software" author David Rice and Ben Rothke discuss accountability for vulnerable software. | 00:16:26 | Apr 3, 2008 |  |
By Raffael Marty Raffael Marty presents concepts from his forthcoming book, Applied Security Visualization. Learn valuable techniques to literally see what is happening on your networks and take decisive action without getting lost in a sea of data. | 0:14:06 | Jan 16, 2008 |  |
By Raffael Marty Raffael Marty presents concepts from his forthcoming book, Applied Security Visualization. Learn valuable techniques to literally see what is happening on your networks and take decisive action without getting lost in a sea of data. | 0:09:42 | Jan 9, 2008 |  |
By Chris Wysopal Chris Wysopal, CTO Veracode discusses his book, The Art of Software Security Testing – an indispensable guide for every technical professional responsible for software security: testers, QA specialists, security professionals, developers, and IT Managers. | 0:09:51 | Jan 2, 2008 |  |
By Greg Abelar Cisco Network Security expert and author, Greg Abelar, offers valuable insights into the future of secure networking technology. | 0:08:34 | Dec 26, 2007 |  |
By Gary McGraw The world's leading Software Security authority, Dr. Gary McGraw, CTO Cigital, Inc. discusses software security, cybercrime, and how to break the barriers to security implementation in software engineering. | 0:08:49 | Dec 19, 2007 |  |
By Gary McGraw The world's leading Software Security authority, Dr. Gary McGraw, CTO Cigital, Inc. discusses the need for security throughout the software development lifecycle, and how to break the barriers to security implementation in software engineering. | 0:09:18 | Dec 12, 2007 |  |
By Greg Hoglund Greg Hoglund, author of Rootkits: Subverting the Windows Kernel, presents all you need to know about the threat that Rootkits pose to cyber-security. Learn about new developments in Rootkit technology & how to prevent your systems from being subverted. | 0:10:12 | Dec 5, 2007 |  |
By Jamie Butler James Butler, co-author of “Rootkits: Subverting the Windows Kernel,” continues his discussion of the importance of full disclosure. Learn everything you need to know about rootkits: what they are, how they work, how to build them, & how to detect them. | 0:07:38 | Nov 28, 2007 |  |
By Jamie Butler James Butler, co-author of “Rootkits: Subverting the Windows Kernel,” the first comprehensive guide to rootkits: what they are, how they work, how to build them, & how to detect them, discusses the importance of full disclosure. | 0:08:21 | Nov 21, 2007 |  |
By Greg Abelar Greg Abelar, author of "Security Threat Mitigation and Response: Understanding Cisco Security MARS," discusses the cost of Network Security. Learn to secure critical data, prevent & mitigate network attacks, and build end-to-end self-defending networks. | 0:08:11 | Nov 14, 2007 |  |
By Greg Abelar Greg Abelar presents tips from his book, Security Threat Mitigation and Response: Understanding Cisco Security MARS. Learn to secure critical data & resources, prevent & mitigate network attacks, and build end-to-end self-defending networks. | 7:12 | Nov 7, 2007 |  |
By Chris Wysopal Chris Wysopal, CTO of Veracode, discusses his book, The Art of Software Security Testing – an indispensable guide for software security professionals. Learn techniques for anticipating and identifying software security problems before the “bad guys” do. | 0:08:42 | Oct 31, 2007 |  |
By Chris Wysopal Chris Wysopal, CTO Veracode discusses his book, The Art of Software Security Testing – an indispensable guide for every technical professional responsible for software security: testers, QA specialists, security professionals, developers, and IT Managers. | 0:07:19 | Oct 24, 2007 |  |
By Gary McGraw The world's leading Software Security authority, Dr. Gary McGraw, CTO Cigital, Inc. discusses the need for security throughout the software development lifecycle, and how to break the barriers to security implementation in software engineering. | 0:09:57 | Oct 17, 2007 |  |
By Gary McGraw Cigital CTO Dr. Gary McGraw, the world's leading software security authority, discusses the implicit demand of software security. Learn about static analysis, penetration testing, architectural risk analysis & enterprise software security programs. | 0:09:59 | Oct 10, 2007 |  |
By Andrew Jaquith Join "Security Metrics" author Andrew Jaquith as he discusses benchmarking within security metrics. | 0:07:01 | Oct 3, 2007 |  |
By Ramesh Nagappan Join "Core Security Patterns" author Ramesh Nagappan as he discusses the security challenges and risks in Java in part two of this video series. | 0:08:48 | Sep 26, 2007 |  |
By Ramesh Nagappan Join "Core Security Patterns" author Ramesh Nagappan as he discusses the security challenges and risks in Java. | 0:08:12 | Sep 18, 2007 |  |
By Ted Neward, Greg Abelar Join "Security Threat Mitigation and Response" author Greg Abelar as he talks about the best way to secure your business with cisco ASA and PIX firewalls. | 0:07:56 | Sep 12, 2007 |  |
By Wes Noonan Join "Firewall Fundamentals" author Wes Noonan as he discusses he discusses the need for firewalls in computer security in part two of this video series. | 0:07:17 | Sep 5, 2007 |  |
By Wes Noonan Join "Firewall Fundamentals" author Wes Noonan as he discusses the need for firewalls in computer security. | 0:08:04 | Aug 29, 2007 |  |
By Greg Hoglund Join "Exploiting Software: How to Break Code" author Greg Hoglund as he discusses the intricacies of online gaming. | 0:09:19 | Aug 22, 2007 |  |
By Greg Hoglund Join "Exploiting Software: How to Break Code" author Greg Hoglund as he discusses online gaming threats. | 0:10:37 | Aug 15, 2007 |  |
By Jerry Lin Join "Cisco NAC Appliance" author Jerry Lin as he discusses the creation of NAC technology. | 0:09:22 | Aug 10, 2007 |  |
By Jamie Butler Join "Rootkits" author Jamie Butler as he discusses how best to detect rootkits. | 0:11:23 | Aug 1, 2007 |  |
By Brian Chess, Jacob West Join host Ted Neward as he discusses secure programming with Brian Chess, Chief Scientist at Fortify Software and Jacob West, Manager of Fortify's Secure Research Group. | 0:11:44 | Jul 25, 2007 |  |
By Greg Abelar Join "Security Threat Mitigation and Response" author Greg Abelar as he discusses the challenges of secure networking. | 0:09:22 | Jul 16, 2007 |  |
By Gary McGraw Join "Exploiting Online Games: Cheating Massively Distributed Systems" author, Gary McGraw, as he discusses security issues in online gaming. | 0:09:57 | Jul 3, 2007 |  |
By Ramesh Nagappan Author Ramesh Nagappan discusses core security patterns that are crucial for secure programming. | 00:06:39 | Jun 20, 2007 |  |
By Andrew Jaquith Author Andrew Jaquith discusses the importance of security metrics in software development. | 00:09:58 | Jun 20, 2007 |  |
By Andrew Jaquith Author Andrew Jaquith continues his discussion on the importance of security metrics in software development. | 00:07:54 | Jun 20, 2007 |  |
By Chris Wysopal Author Chris Wyposal discusses techniques for identifying software security flaws. | 00:11:24 | Jun 20, 2007 |  |