Jim Manico -- MORE OWASP!

How can developers turn OWASP’s many projects into practical help with the code they write? Jim Manico joins Chris and Robert to discuss the resources he helps build and the problems each is meant to solve. He traces his move from software development into security education, then explains the OWASP Java Encoder and how its focused approach differs from a larger security library such as ESAPI. The conversation also explores the debate surrounding the 2017 OWASP Top 10, the value of the Cheat Sheet Series, and the developer-oriented Proactive Controls. Jim shares lessons from writing Iron-Clad Java and from teaching application security. Throughout, he emphasizes accessible guidance, sound security APIs, and community work that helps developers put defenses into practice.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Jim Manico:
→ Jim Manico on LinkedIn
→ Manicode Security

Mentioned in this episode:
→ OWASP Java Encoder Project
→ OWASP ESAPI
→ OWASP Cheat Sheet Series
→ OWASP Proactive Controls

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 OWASP projects with Jim Manico
01:01 From software development to security education
02:27 Learning security as a developer
05:12 Joining and contributing to OWASP
10:32 The OWASP Java Encoder
11:56 Java Encoder compared with ESAPI
13:24 Bringing safer APIs into the platform
20:00 The debate around the OWASP Top 10
24:16 Collaboration at the OWASP Summit
25:33 How to use the Cheat Sheet Series
28:10 Proactive Controls for developers
29:25 Writing Iron-Clad Java
31:55 Life, teaching, and opportunities in AppSec