InfoQ Homepage Security Content on InfoQ
About this Podcast
Intended for architects and senior developers.
-
Kim Lewandowski and Michael Lieberman on Securing the Software Supply Chain with SLSA
Charles Humble talks to Kim Lewandowski and Michael Lieberman about the SLSA framework. They discuss why the software supply chain is under growing attack, explore the key ideas in SLSA and its connection to Google’s Binary Authentication for Borg, and think about how the framework might evolve.
/podcasts/software-supply-chain-security/en/mediumimage/software-supply-chain-security-1654548294837.jpg)
-
Cyber Security with Maxime Lamothe-Brassard
On this episode of the InfoQ Podcast, Thomas Betts talks with Maxime Lamothe-Brassard about cybersecurity. Understanding security is very similar to understanding software architecture, with general concepts applicable to everyone, and specific needs that depend on your situation. The discussion covers roles and responsibilities, DevSecOps, and the current and future state of cloud-native security
/podcasts/cyber-security/en/mediumimage/maxime-lamothe-brassard-m-1643032214893.jpg)
-
Michelle Brenner Builds Netflix Workstations and Enables Artists to Create From Anywhere
Producing television shows and movies at Netflix-scale means having a way to efficiently work with many artists and content creators. Netflix Workstations were created as a cloud-based solution to provide artists with secure access to the applications and content they need to complete their work. We talk about the benefits and trade-offs of the solution that enables artists to create from anywhere
/podcasts/netflix-builds-workstations/en/mediumimage/michelle_brenner-m-1635521068762.jpg)
-
Mario Platt on DevSecOps, Platforms, and Threat Modelling
In this podcast, Mario Platt, VP head of information security at CloudMargin, sat down with InfoQ podcast co-host Daniel Bryant. Topics discussed included: the differences and similarities between DevSecOp and DevOps; the role of a platform in relation to system security; and the value of threat modelling.
/podcasts/devsecops-platforms-threat-modelling/en/mediumimage/mario-platt-m-1608942657847.jpg)
About this Podcast
Discussions on intentional corporate culture and software management approaches.
-
Vulnerabilities and Risks in the Software Supply Chain
Shane Hastie spoke to Brian Fox of Sonatype about vulnerabilities and risks inherent in the modern software supply chain and how to overcome them.
/podcasts/software-suply-chain-vulnerabilities-risks/en/mediumimage/brian-fox-1650612108393.jpg)
-
The Challenges of DevOps and the Importance of Developer Experience with Jyoti Bansal
In this podcast, Shane Hastie spoke to Jyoti Bansal about the challenges of DevOps today and the importance of developer experience for effective software development today.
/podcasts/devops-challenges-developer-experience/en/mediumimage/Jyoti-Bansal-m-1645454523771.jpg)
-
Nishant Bhajaria on Security, Privacy and Ethics
In this podcast Shane Hastie, lead editor for culture & methods, spoke to Nishant Bhajaria about security, data privacy, ethics and privacy by design .
/podcasts/security-privacy-ethics/en/mediumimage/Nishant-Bhajaria-m-1600894221630.jpg)
-
Derek Weeks on the 2020 DevSecOps Community Survey Results
In this podcast Shane Hastie, Lead Editor for Culture & Methods, spoke to Derek Weeks of Sonatype about the results of the 2020 DevSecOps Community Survey and the All Day DevOps conference.
/podcasts/devsecops-survey-results/en/mediumimage/Derek-Weeks-1591393081021.jpg)
-
Chris Matts & Tony Grout on IT Risk Management Framework as a Catalyst for Change
In this podcast Shane Hastie, Lead Editor for Culture & Methods, talks to Tony Grout and Chris Matts about building an IT risk management framework at a large bank and using that as a catalyst for a digital transformation.
/podcasts/it-risk-management/en/mediumimage/image-1524554659270.jpg)
CONTENT IN THIS BOX PROVIDED BY OUR SPONSOR
Sponsored Content
O’Reilly Book: Identity-Native Infrastructure Access Management
[Early Release] Preventing breaches by eliminating secrets and adopting Zero Trust. Get a peek inside the first chapters. Download now.
Cookie for a Thought - How to Manage HTTP Sessions
This blog post covers the best practices to deal with HTTP sessions. Learn more.
How Passwordless Works
Passwordless is an example of how great security doesn't have to compromise usability, but instead improves it. Learn More.
Ghosts of Past Employees
Why access control has more in common with Halloween than you think. Find out now.
