Understanding developer behavior can augment DevSecOps | Guest Nir Valtman

Today on Cyber Work, Nir Valtman, CEO and co-founder of Arnica, discusses developer behavior-based security. In short, there are lots of ways that backdoors or vulnerabilities can make their way into developer code. One door we can close on these intrusions is implementing processes that detect behavior anomalies in developers. Think of your bank monitoring for unusual purchases calling you to ask whether you really just spent $300 on a bobblehead from The Last of Us that’s shipping from Brazil. If you did, not judging, full speed ahead. If not, then we’ve got a problem on our hands. Valtman explains the benefits and the limitations of behavior-based security measures, as well as tips for developers-in-training.0:00 - Developer behavior-based security 2:56 - Nir Valtman’s start in cybersecurity4:40 - Moving into the developer world 8:20 - Working as a cybersecurity CEO10:33 - A typical day for a cybersecurity CEO19:30 - Monitoring product features20:15 - DevSecOps behavior-based security27:42 - Flagging irregular online purchases30:35 - Impact of pre-fab code on behavior anomaly detection33:28 - GitHub impact on developer behavior and security38:09 - Ensuring you don’t skimp on sec in DevSecOps42:35 - What should future developers know? 44:56 - Skills and experiences for budding developers51:09 - What is Arnica?54:57 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast