Hasan Yasar -- Actionable SBOM via DevSecOps

Hasan Yasar believes that everyone shares the responsibility of creating a secure environment, and this can only be achieved by working collaboratively. He underscores the idea that security is not an isolated endeavor but a collective effort, urging everyone to come together and build a world where safety and security are paramount. We're honored to have Hasan Yasar, the technical director of the Continuous Deployment of Capability Group at the renowned Software Engineering Institute at Carnegie Mellon University. With over 25 years of experience in secure software development, Hasan is at the forefront of leveraging emerging tech like DevSecOps, AI, ML, and more to drive transformation in software development.Connect with Hasan Yasar:→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society→ Cybersecurity First Principles: A Reboot of Strategy and TacticsMentioned in this episode:→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society→ Cybersecurity First Principles: A Reboot of Strategy and Tactics→ Carnegie Mellon University Software Engineering Institute→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society→ Software Transparency→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society by Chris Hughes, Tony Turner→ SPDX→ Log4jFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Hasan Yasar: Actionable SBOM via DevSecOps02:17 Yeah, we're going to unpack SBOM, as our listeners know, one05:30 Caught my attention when you mentioned F-16 simulators and Secure by11:22 We're heading, we're heading towards a world where... There's, there's, you17:12 Yeah. And I think, you know, I think there is a21:07 No, it was great, great conversation. Uh, uh, just quick aside23:47 I know we've heard in your history, you've talked about some31:38 Uh, so Hasan, uh, you've talked about or mentioned the term34:46 Does that work37:34 Does that work from a speed perspective43:09 All right. So Hasan, we have, we have three questions. So45:06 Excellent. And what's your top book recommendation