Erik Cabetas -- Cracking Codes on Screen and in Contests: An Expert's View on Hacking, Vulnerabilities, and the Evolution of Cybersecurity Language

Erik Cabetas joins Robert and Chris for a thought-provoking discussion about modern software security. They talk about the current state of vulnerabilities, the role of memory-safe languages in AppSec, and why IncludeSec takes a highly systematic approach to security assessments and bans OWASP language. Along the way, Erik shares his entry into cybersecurity and his experience consulting about hacking for TV shows and movies. The conversation doesn't end before they peek into threat modeling, software engineering architecture, and the nuances of running security programs. Eric Cabetas has more than two decades of experience in InfoSec. His previous posts include senior roles at Ernst Young, Fortify Software, and theladders.Connect with Erik Cabetas:→ Security Engineering by Ross Anderson→ IncludeSecMentioned in this episode:→ Security Engineering by Ross Anderson→ IncludeSec→ New School Of Information Security 9780132800280→ DEF CON→ OWASP Top Ten→ Rust→ Go→ OpenSSF→ RSA ConferenceFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Introduction01:32 Security Origin Story04:28 Winning DEF CON CTF08:36 Hollywood Hacking Consultant15:05 The Current State of Vulnerabilities26:45 Memory Safe Languages35:19 Banning OWASP Language?41:26 Lighting Round