Application Security AppSec 101 - Tanya Janca

<p>In this episode of the Virtual Coffee with Ashish edition, we spoke with <em><strong>Tanya Janca, </strong></em>Founder, SheHacksPurple &amp; WeHackPurple.</p> <ul> <li>Host: <a href="https://twitter.com/hashishrajan">Ashish Rajan - Twitter @hashishrajan</a></li> <li>Guest: <a href="https://ca.linkedin.com/in/tanya-janca">Tanya Janca - Linkedin &nbsp; &nbsp;<br> </a></li> </ul> <p>Tanya &amp; Ashish spoke about</p> <ul> <li>Who is Tanya Janca? :)</li> <li>What was your path into CyberSecurity or your current role?</li> <li>What has professional life been after leaving Microsoft?</li> <li>What does Cloud Security mean for you?</li> <li>What is Application Security or AppSec?</li> <li>Tanya Janca’s Book - “Alice and Bob learn Application Security”</li> <li>How can someone start in Application Security, specially if they are trying to move laterally?</li> <li>What is Static Code Analysis?</li> <li>What is DevSecOps</li> <li>What is CI/CD Pipeline?</li> <li>Loss of AppSec knowledge when people move on? How do you find the motivation to continue?</li> <li>What is an AppSec Program and how can one make it successful?</li> <li>What does a Mature AppSec Program look like?</li> <li>Are there any tools used for Threat Modelling or is it conducted separately?</li> <li>What’s the most difficult piece of AppSec discipline to explain to others again and again?</li> <li>How do I get buy in from management?</li> <li>How do you do Threat Modelling in CI/CD Pipeline or automate it?</li> <li>What soft skills do you need to be an Application Security person?</li> <li>How do you merge AppSec risk in the infrastructure risk to get a wholistic view?<br> </li> </ul> <p><strong>ShowNotes and Episode Transcript </strong>on <a href="https://anchor.fm/dashboard/episode/eavn9r/metadata/www.cloudsecuritypodcast.tv">www.cloudsecuritypodcast.tv</a></p> <p><strong>Twitter</strong> - <a href="https://anchor.fm/dashboard/episode/eavn9r/metadata/www.twitter.com/kaizenteq">@kaizenteq</a> <a href="https://an