Derek Fisher -- The Application Security Handbook

Derek is the author of “The Application Security Handbook. ” He is a university instructor at Temple University, where he teaches software development security to undergraduate and graduate students. He is a speaker on topics in the cybersecurity space and has led security teams, large and small, at organizations in the healthcare and financial industries. Derek joins us to unpack the goals of an application security program, what is cutting edge in application security programs today, the role of open source vs. commercial, and guidance such as "decentralized application security. " "enablement instead of gates; application security as a service," and "stop chasing the shiny new tool.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Derek Fisher is the author of The Application Security Handbook.
→ Learn more about Security Journey

Connect with Derek Fisher:
→ The Application Security Handbook
→ Application Security Program Handbook

Mentioned in this episode:
→ The Application Security Handbook
→ Application Security Program Handbook
→ Manning Publications
→ OWASP ModSecurity Core Rule Set

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Derek Fisher: The Application Security Handbook
02:04 Excellent. And I know you just wrote a book or just
04:27 Derek, you mentioned in our previous conversation getting ready for this
10:27 Rewind the tape here. That's not entry-level. If you have to
14:51 It's, I mean, I think there is value though, right
17:26 With that in mind, in thinking about application programs today, is
20:02 I think about, you know, across the innovation we've seen in
22:18 I think part of the challenge is there really hasn't been
25:38 Yeah, it kind of brings you to more of a culture
30:17 Or sound impressive, right
33:52 So you also, you know, you kind of mentioned this a
38:16 Yeah, no, that's helpful, helpful to have that perspective. Like, it's
39:22 My, I'm going to go first with a key takeaway here