Chris Hughes -- Software Transparency

Chris Hughes, co-founder of Aquia, joins Chris and Robert on the Application Security Podcast to discuss points from his recent book Software Transparency: Supply Chain Security in an Era of a Software-Driven Society, co-authored with Tony Turner. The conversation touches on the U. government in the software supply chain, the definition and benefits of software transparency, the concept of a software bill of materials (SBOM), and the growth of open-source software. Chris Hughes is a proven cloud cybersecurity leader. with nearly 20 years of experience in the federal and commercial industries. Chris has a dynamic skill set with a blend of IT, cyber cloud security, and DevSecOps experience.Connect with Chris Hughes:→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society→ Application Security Program HandbookMentioned in this episode:→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society→ Application Security Program Handbook→ Agile Application Security→ CNCF Catalog of Supply Chain Compromises→ Aquia→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society→ OpenSSF→ OpenSSL→ Let's Encrypt→ Sigstore→ Minimum Viable Secure Product→ Executive Order 14028→ Agile Application Security: Enabling Security in a Continuous Delivery Pipeline→ The Application Security Program Handbook by Derek FisherFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Chris Hughes: Software Transparency03:42 Yeah, and you're, uh, you're co author of the latest book04:31 Yeah, one thing that I kind of went down the thought08:13 Yeah, yeah, and I think it's going to become a bigger09:37 I think we've got, uh, we've got a couple different angles11:52 Yeah, that's, that's always, you know, security and privacy, not privacy15:32 I mean, that's why, when you think about one of the17:01 Yeah, we're talking about the funding of nation states. Right, they20:10 Yeah. So I've, uh, you know, I've kind of been waiting22:48 Yeah. This is a weird situation in the sense that, you25:14 Yeah. I mean, it's definitely a real risk. Uh, I feel28:54 Yeah, that's, that's, but that's the reality of the, the world31:51 All right. Well, let's, uh, let's talk about the, the kind35:23 A billboard, what would it say for a message if you37:14 Then, uh, yeah, Derek, excuse me, Derek was a guest on