Hasan Yasar -- Actionable SBOM via DevSecOps

Hasan Yasar believes that everyone shares the responsibility of creating a secure environment, and this can only be achieved by working collaboratively. He underscores the idea that security is not an isolated endeavor but a collective effort, urging everyone to come together and build a world where safety and security are paramount. We're honored to have Hasan Yasar, the technical director of the Continuous Deployment of Capability Group at the renowned Software Engineering Institute at Carnegie Mellon University. With over 25 years of experience in secure software development, Hasan is at the forefront of leveraging emerging tech like DevSecOps, AI, ML, and more to drive transformation in software development.

Connect with Hasan Yasar:
→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society
→ Cybersecurity First Principles: A Reboot of Strategy and Tactics

Mentioned in this episode:
→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society
→ Cybersecurity First Principles: A Reboot of Strategy and Tactics
→ Carnegie Mellon University Software Engineering Institute
→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society
→ Software Transparency
→ Software Transparency: Supply Chain Security in an Era of a Software-Driven Society by Chris Hughes, Tony Turner
→ SPDX
→ Log4j

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Hasan Yasar: Actionable SBOM via DevSecOps
02:17 Yeah, we're going to unpack SBOM, as our listeners know, one
05:30 Caught my attention when you mentioned F-16 simulators and Secure by
11:22 We're heading, we're heading towards a world where... There's, there's, you
17:12 Yeah. And I think, you know, I think there is a
21:07 No, it was great, great conversation. Uh, uh, just quick aside
23:47 I know we've heard in your history, you've talked about some
31:38 Uh, so Hasan, uh, you've talked about or mentioned the term
34:46 Does that work
37:34 Does that work from a speed perspective
43:09 All right. So Hasan, we have, we have three questions. So
45:06 Excellent. And what's your top book recommendation