28: Securing our Web Applications

Gary McGraw (@cigitalgem), CTO of the security giant Cigital, chats with us about how web developers, and software engineers in general, can best secure applications we are building today. We dive into best practices, team collaboration techniques, where to go for further information, and what companies like Cigital are doing for the web security community.

Resources

• Cigital- http://www.cigital.com/

• The Silver Bullet Podcast - http://www.cigital.com/silver-bullet/

• Web Application Security Consortium - http://www.webappsec.org/

• Software Security - Building Security In - http://www.amazon.com/Software-Security-Building-In/dp/0321356705

• NodeGoat - http://nodegoat.herokuapp.com/login

• RailsGoat - http://railsgoat.cktricky.com/

• Gary’s books - http://www.cigital.com/~gem/books/

• Charlie Miller Interview - http://www.cigital.com/silver-bullet/show-095/

• OWASP - https://www.owasp.org/

Panelists

• Adi Chikara - ATG Lead at3Pillar Global

• Christian Smith - Open Source developer & Startup Enthusiast

• Chetan Karande - Senior Software Engineer at Omgeo  

• Erik Isaksen - UX Engineer at3Pillar Global

• Rob Simpson - Senior Front End Developer atCapco

• Nick Niemeir - JavaScript Agent Engineer at New Relic