Jeff Williams -- The Tech of Runtime Security

Jeff Willams of Contrast Security joins Chris and Robert on the Application Security Podcast to discuss runtime security, emphasizing the significance of Interactive Application Security Testing (IAST) in the modern DevOps landscape. After reflecting on the history of OWASP, the conversation turns to the challenges organizations face in managing their application security (AppSec) backlogs. Jeff highlights the alarming number of unresolved issues that often pile up, emphasizing the inefficiencies of traditional security tools. Jeff Williams is a veteran application security expert who founded and led OWASP, Aspect Security, and Contrast Security. Jeff also created several highly successful open source projects, including jbom, jot, OWASP Top Ten, WebGoat, ESAPI, ASVS, and more.

Connect with Jeff Williams:
→ Jeff Williams on LinkedIn
→ Java Observability Toolkit (JOT)

Mentioned in this episode:
→ Jeff Williams on LinkedIn
→ Java Observability Toolkit (JOT)
→ Venture in Security: solving the circle sticker problem
→ Contrast Security
→ B09NRF399J
→ Brakeman

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Jeff Williams: The Tech of Runtime Security
03:51 What's the root of that problem
05:42 You're someone who's been around AppSec since the beginning of AppSec
07:27 Let's, uh, let's take a look at that. Um, what is
09:12 In your, in your AppSec program that you're building here, are
11:46 Okay. What about performance though
16:55 Hmm. So are you using the same detection and rule technology
22:15 About reachability
25:16 You think about these types of technologies, I'm curious from your
29:47 Yeah. And that's one of the things, um, one, one of
33:00 Hmm. It's funny that, that, that were the, those were the
34:56 Good. Um, next is, uh, what would it say if you
37:13 Yeah. Very cool. So Jeff, we always like to end with