Ken Toler -- Blockchain, Cloud, and #AppSec

Ken Toler is a principal consultant at Kudelski Security and is passionate about building and optimizing application security programs that stick through strong adoption and ease of use. Ken has spent considerable time on all sides of the security aisle from playing defense and managing security teams to offense by breaking applications and reviewing code. Ken is also the host and creator of the Relating to DevSecOps podcast that focuses on forging strong relationships between engineers, operations, and security through collaboration, understanding, skill-sharing, and healthy debate. Ken joins us to talk all things Blockchain and AppSec. We define Blockchain, discuss the connections between cloud, appsec, and blockchain, common architecture failures, pen testing, and even dive into smart contracts.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Ken Toler is a principal consultant at Katelski Security and is passionate about building and optimizing AppSec programs that stick through strong adoption and ease of use.
→ Learn more about Security Journey

Connect with Ken Toler:
→ Secureum Videos
→ The Rust Programming Language

Mentioned in this episode:
→ Secureum Videos
→ The Rust Programming Language
→ Blockchain Security @ Kudelski
→ Blockchain Security A Need For Todays Businesses Complete Guide For Beginners
→ Rust

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Ken Toler: Blockchain, Cloud, and AppSec
02:06 It was a place in Texas. And Ken and I happened
05:00 It's a term that we heard. I mean, certainly in the
06:31 At the end of the day, It's an immutable ledger of
12:05 That's helpful because I hadn't really thought of it. I guess
15:20 Yeah, that's, that's very helpful. And before we transition into thinking
18:53 Yeah. To draw a parallel from my AppSec history and experience
21:59 They can decide who they want to go after first. It's
24:45 I want to get into what kinds of surprising mistakes you've
26:52 Yeah, definitely a different set of skills than our classic, you
29:05 Can you pen test a blockchain
32:13 Smart contracts and secure coding, how these things fit together. When
34:14 Yeah, I think that's a good definition that takes away from
36:42 We have a smart contract that is written onto a blockchain
38:58 You look at the code
42:53 Yeah. Very cool. So what would be your key takeaway then