Jeff Williams -- The Tech of Runtime Security

Jeff Willams of Contrast Security joins Chris and Robert on the Application Security Podcast to discuss runtime security, emphasizing the significance of Interactive Application Security Testing (IAST) in the modern DevOps landscape. After reflecting on the history of OWASP, the conversation turns to the challenges organizations face in managing their application security (AppSec) backlogs. Jeff highlights the alarming number of unresolved issues that often pile up, emphasizing the inefficiencies of traditional security tools. Jeff Williams is a veteran application security expert who founded and led OWASP, Aspect Security, and Contrast Security. Jeff also created several highly successful open source projects, including jbom, jot, OWASP Top Ten, WebGoat, ESAPI, ASVS, and more.Connect with Jeff Williams:→ Jeff Williams on LinkedIn→ Java Observability Toolkit (JOT)Mentioned in this episode:→ Jeff Williams on LinkedIn→ Java Observability Toolkit (JOT)→ Venture in Security: solving the circle sticker problem→ Contrast Security→ B09NRF399J→ BrakemanFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Jeff Williams: The Tech of Runtime Security03:51 What's the root of that problem05:42 You're someone who's been around AppSec since the beginning of AppSec07:27 Let's, uh, let's take a look at that. Um, what is09:12 In your, in your AppSec program that you're building here, are11:46 Okay. What about performance though16:55 Hmm. So are you using the same detection and rule technology22:15 About reachability25:16 You think about these types of technologies, I'm curious from your29:47 Yeah. And that's one of the things, um, one, one of33:00 Hmm. It's funny that, that, that were the, those were the34:56 Good. Um, next is, uh, what would it say if you37:13 Yeah. Very cool. So Jeff, we always like to end with