What best drives the adoption of secure software practices? with Enrique Larios Vargas

Om avsnittet

Today, I’m joined by Enrique Larios Vargas, a Security and Learning Specialist at Adyen.

Enrique has over eight years of experience designing impactful learning and enablement programs across fintech, engineering, and security. He’s also been a university lecturer in software engineering in Peru, the Netherlands, and Canada.

Bringing together technical expertise and behavioral science, Enrique is passionate about helping developers move beyond compliance and build a meaningful, human-centered security culture.

In this episode, we dive into his research paper, “DASP: A Framework for Driving the Adoption of Software Security Practices,” co-authored with five others (all listed in the description). The paper explores how behavioral models like COM-B can drive secure development practices.

We also get into incentives and Enrique’s controversial take on why we shouldn’t call security champions “champions” anymore. He’ll even be put to the test on this topic at the upcoming Elephant in AppSec conference, where he’ll debate it with other panelists.

Dive right in!

Om avsnittet

Fler avsnitt

Don't just model the attack, model the recovery with Petra Vukmirovic

The Docker mistakes everyone's still making and how to fix them with Advait Patel

Why Security Loses Influence in High-Growth Companies (And What to Do About It) with Kavia Venkatesh

The Lethal Trifecta or why your AI agent knows too much - Jason Fernandes

25 years of the same problem in Application Security - Sam Stepanyan

Should security belong in every AI strategy meeting? with Amol Deshpande

What Mindset Shift Developers Need to Break Into Security? with Aleksandra Kornecka

Is the AI–API interaction the biggest security blind spot? with Gowtham Sundar

Why AppSec Needs More Than Just a Checkbox ⎢ Marcos Vinicius Cassel

The Supply Chain Crisis We Created: How AI, Extensions, and Dependencies Became the New Attack Surface with Aamiruddin Syed