Ken Toler -- Blockchain, Cloud, and #AppSec

Ken Toler is a principal consultant at Kudelski Security and is passionate about building and optimizing application security programs that stick through strong adoption and ease of use. Ken has spent considerable time on all sides of the security aisle from playing defense and managing security teams to offense by breaking applications and reviewing code. Ken is also the host and creator of the Relating to DevSecOps podcast that focuses on forging strong relationships between engineers, operations, and security through collaboration, understanding, skill-sharing, and healthy debate. Ken joins us to talk all things Blockchain and AppSec. We define Blockchain, discuss the connections between cloud, appsec, and blockchain, common architecture failures, pen testing, and even dive into smart contracts.The Application Security Podcast is brought to you by Security Journey.About Security JourneyKen Toler is a principal consultant at Katelski Security and is passionate about building and optimizing AppSec programs that stick through strong adoption and ease of use.→ Learn more about Security JourneyConnect with Ken Toler:→ Secureum Videos→ The Rust Programming LanguageMentioned in this episode:→ Secureum Videos→ The Rust Programming Language→ Blockchain Security @ Kudelski→ Blockchain Security A Need For Todays Businesses Complete Guide For Beginners→ RustFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Ken Toler: Blockchain, Cloud, and AppSec02:06 It was a place in Texas. And Ken and I happened05:00 It's a term that we heard. I mean, certainly in the06:31 At the end of the day, It's an immutable ledger of12:05 That's helpful because I hadn't really thought of it. I guess15:20 Yeah, that's, that's very helpful. And before we transition into thinking18:53 Yeah. To draw a parallel from my AppSec history and experience21:59 They can decide who they want to go after first. It's24:45 I want to get into what kinds of surprising mistakes you've26:52 Yeah, definitely a different set of skills than our classic, you29:05 Can you pen test a blockchain32:13 Smart contracts and secure coding, how these things fit together. When34:14 Yeah, I think that's a good definition that takes away from36:42 We have a smart contract that is written onto a blockchain38:58 You look at the code42:53 Yeah. Very cool. So what would be your key takeaway then