Beyond the Perimeter Podcast Series Episode 54 "Web Applications Need Security, Too--Part 2"

BEYOND THE PERIMETER PODCAST SERIES EPISODE 54:

“WEB APPLICATIONS NEED SECURITY, TOO–PART 2”

Emeryville, Calif.— October 13, 2009

News Facts

  • In the most recent episode of Beyond the Perimeter, “Web Applications Need Security Too, Part 2,” Amrit Williams speaks with Doug Wilson, co-chair of Open Web Application Security Project (OWASP) Washington, DC chapter, on what to expect at AppSec DC, the premier Web application security conference in Washington D.C. from November 10-13.
  • Key words include: security, web-based applications, OWASP, AppSec DC.  

Background and Context

  • Beyond the Perimeter is an interview-style podcast series that began publishing in February 2009, hosted by BigFix, Inc., CTO Amrit Williams.
  • Beyond the Perimeter guests include luminaries and decision makers with expertise in enterprise information technology, computer security, system management and IT best practices. The content expressed on Beyond the Perimeter is the sole responsibility of the respective speakers and do not reflect the views of BigFix, Inc.
  • Amrit Williams has held a variety of engineering, management and consulting positions in the IT industry including research director in the Information Security and Risk Research Practice at Gartner, Inc. and engineering/management positions at nCircle Network Security, Consilient Inc., Network Associates, and McAfee. Williams is a Certified Information Systems Security Professional (CISSP) and a Certified Information Security Manager (CISM).

Episode #54 Notable Quotes from Doug Wilson

  • “This is the national OWASP meet-up for the year so we are covering some OWASP business, top ten list, innovations, OWASP ESAPI and various OWSAP projects. We have speakers from around the industry with public and private sectors covering a lot of things [such as software development, lifecycle, matrix, compliance and overall process] which will hopefully be of interest for people across the spectrum.”
  • “Web application security is not about having somebody come out with an exploit and patching it back and forth, which you often see in other aspects of security. It is really about fixing process. It’s one of those things that are very hard for organizations to grasp until suddenly they get it and then once they have it in place, they wonder why they would have ever done anything else.”
  • “Most of the stuff that’s being discussed here, especially the OWASP components of it, are freely available and we are just providing educational material so that people can take it back to their organizations and fundamentally change the way they do things, so that not only did they secure one Web application but they secure all their Web applications going forward. That’s our ultimate goal right there.”

Information Resources

About BigFix

Founded in 1997, the BigFix®, Inc. solutions support a global portfolio of A-list organizations in government, finance, retail, educational, industrial and public utility sectors. BigFix revolutionizes IT infrastructure management by replacing fragmented collections of single-purpose tools with the industry’s only unified visibility and control architecture that consolidates up to 18 security, IT compliance, decision support, and green computing functions. For more information, visit www.bigfix.com, follow BigFix on Twitter @BigFix, or stay in touch on the BigFix Facebook page, http://tinyurl.com/mvn9nu .

 

# # #

Nicole Colwell                       

Citigate Cunningham for BigFix, Inc.

415-442-4022           

ncolwell@citigatecunningham.com

 

 

© 2009 BigFix, Inc. All rights reserved. All company and product names mentioned herein may be trademarks of their respective companies.