CSCP S03EP14 - Brook Schoenfield - Appsec and History what have we learned so far

<p></p> <p> </p> <p class="p1">Brook Schoenfield is an Elder AppSec Diplomat, the author of seven books about software security and AppSec, a researcher, the builder and leader of four AppSec programs at major tech companies, and a Master Security Architect for consultancies. Brook talks about his long career path, concerns and hopes for the industry, and the importance of threat modelling. There are 27-28 million programmers on Earth, but Brook fears that only a million work in security. </p> <p class="p1"> </p> <p>The episode is brought to you by AppSec Phoenix Ltd with the Phoenix Security Cloud Platform, you can make vulnerability management for software and cloud SMART.  Follow the tag #appsecsmart</p> <p><a href='https://www.appsecphoenix.com'>https://www.appsecphoenix.com</a> Get access today: <a href='https://appsecphoenix.com/demo'>https://appsecphoenix.com/demo</a> </p> <p> </p> <p class="p1">0:00 Introductions</p> <p class="p1">4:00 27-28 mil programmers need for security</p> <p class="p1">6:30 No silver bullet in software security</p> <p class="p1">8:55 Brook’s career path into security</p> <p class="p1">13:10 Bugs aren’t going anywhere</p> <p class="p1">15:00 Next generation of InfoSec</p> <p class="p1">21:06 Threat modelling, dynamic risk assessment</p> <p class="p1">26:05 Story of threat modelling</p> <p class="p1">28:06 Threat modelling tools</p> <p class="p1">29:40 Beyond functionality, malicious attackers</p> <p class="p1">32:30 Communicating with management</p> <p class="p1">37:50 Tipping point, integrity</p> <p class="p1">41:56 Final positive message</p> <p class="p1">47:33 Outro </p> <p class="p1"> </p> <p class="p1">Brook Schoenfield </p> <p class="p1">Linkedin: <a href='https://linkedin.com/in/brookschoenfield'>https://linkedin.com/in/brookschoenfield</a> </p> <p class="p1"><a href='https://brookschoenfield.com'> https://brookschoenfield.com</a></p> <p class="p1">Twitter @BrkSchoenfield</p> <p class="p1"> </p> <p class="p1">Mentioned </p> <p class="p1"><a href='https://www.microsoft.com/en-