Derek Fisher -- The Application Security Handbook

Derek is the author of “The Application Security Handbook. ” He is a university instructor at Temple University, where he teaches software development security to undergraduate and graduate students. He is a speaker on topics in the cybersecurity space and has led security teams, large and small, at organizations in the healthcare and financial industries. Derek joins us to unpack the goals of an application security program, what is cutting edge in application security programs today, the role of open source vs. commercial, and guidance such as "decentralized application security. " "enablement instead of gates; application security as a service," and "stop chasing the shiny new tool.The Application Security Podcast is brought to you by Security Journey.About Security JourneyDerek Fisher is the author of The Application Security Handbook.→ Learn more about Security JourneyConnect with Derek Fisher:→ The Application Security Handbook→ Application Security Program HandbookMentioned in this episode:→ The Application Security Handbook→ Application Security Program Handbook→ Manning Publications→ OWASP ModSecurity Core Rule SetFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Derek Fisher: The Application Security Handbook02:04 Excellent. And I know you just wrote a book or just04:27 Derek, you mentioned in our previous conversation getting ready for this10:27 Rewind the tape here. That's not entry-level. If you have to14:51 It's, I mean, I think there is value though, right17:26 With that in mind, in thinking about application programs today, is20:02 I think about, you know, across the innovation we've seen in22:18 I think part of the challenge is there really hasn't been25:38 Yeah, it kind of brings you to more of a culture30:17 Or sound impressive, right33:52 So you also, you know, you kind of mentioned this a38:16 Yeah, no, that's helpful, helpful to have that perspective. Like, it's39:22 My, I'm going to go first with a key takeaway here