Loren Kohnfelder -- Designing Secure Software

Ochaun Marshall is an Application Security Consultant. In his roles of secure ideas, he works on on-going development projects utilizing Amazon web services and breaks other people's web applications. Ochaun joins us to talk about SAST and IaC, static application security testing and infrastructure as code. We talk about what they are, how they work, the security benefits, some of the tools that make them possible, and we finish our conversation talking about developer empathy and why Ochaun has developer empathy as a result of some of the experiences that he has as a developer and as a security person. We hope that you enjoy this episode with...The Application Security Podcast is brought to you by Security Journey.About Security JourneyLoren Kohnfelder has over 20 years of experience in the security industry.→ Learn more about Security JourneyConnect with Loren Kohnfelder:→ Designing Secure Software→ Ron RivestMentioned in this episode:→ Designing Secure Software→ Ron Rivest→ Robert HurlbutFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Loren Kohnfelder: Designing Secure Software01:46 For our listeners, we always start with our guest's security origin07:29 I first started at Cisco learning about threat modeling and trying09:17 As I was taking a look at the book and I17:20 As I was reading through the book and looking at the20:13 We do a good enough job to deal with this26:26 So as we're coming towards the kind of the conclusion of28:57 Yeah, we definitely agree with you on that. Like, we wanna