Eitan Worcel -- Is AI a Security Champion?

Eitan Worcel joins the Application Security Podcast, to talk automated code fixes and the role of artificial intelligence in application security. We start with a thought-provoking discussion about the consistency and reliability of AI-generated responses in fixing vulnerabilities like Cross-Site Scripting (XSS). The conversation highlights a future where AI on one side writes code while AI on the other side fixes it, raising questions about the outcomes of such a scenario. We're thrilled to host Eitan Worcel, the co founder and CEO of Mobb, and a seasoned AppSec expert with 15 years of experience. From his early days as a developer to his current role as a business leader, Eitan has been at the forefront of detecting security issues.

Connect with Eitan Worcel:
→ The Hard Thing About Hard Things by Ben Horowitz
→ The Hard Thing About Hard Things Ben Horowitz

Mentioned in this episode:
→ The Hard Thing About Hard Things by Ben Horowitz
→ The Hard Thing About Hard Things Ben Horowitz
→ ChatGPT
→ AppScan Standard (HCL)
→ Carnegie Mellon University Software Engineering Institute
→ OWASP Juice Shop
→ GitHub Copilot
→ Veracode

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Eitan Worcel: Is AI a Security Champion?
02:29 Luckily it's, you know, it's not easy being me is what
03:54 Understood. Understood. So typically when, uh, somebody joins us in the
08:01 Yeah. I mean, I'm gonna let Robert go next though. So
13:34 It's about trust. It's about, it's about like with this, with
18:12 That a common thing that's happening behind the scenes in the
20:13 Right, let's, uh, let's wrap back around here and start talking
23:05 Then what's, how, how do things, how is it different from
25:42 I mean, it sounds like that's a human function still, like
28:37 I like what you just were saying about predictability because you're
30:42 About how do we prevent the introduction of new vulnerabilities with
32:58 Does the AI handle complex, multi layered security issues in the
34:08 Yeah. I mean, that's, that's my next question. So where, you
37:04 Uh, what advice would you give an organization that's trying to
40:23 Yeah. Yeah. There's a privacy angle in there, uh, for the
41:58 You see, um, a world in AI where we'll have the
45:30 Okay. Number two, billboard message. What would it say if you