Beyond the Perimeter Podcast Series Episode 53 "Web Applications Need Security, Too--Part 1"

 

BEYOND THE PERIMETER PODCAST SERIES EPISODE 53:

“WEB APPLICATIONS NEED SECURITY, TOO–PART 1” 

Emeryville, Calif.— October 5, 2009

News Facts

  • In the most recent episode of Beyond the Perimeter, “Web Applications Need Security, Too,” Amrit Williams speaks with Doug Wilson, co-chair of Open Web Application Security Project (OWASP) Washington, DC Chapter, and Michael Smith, the Guerilla CISO, on community efforts to improve security of web-based applications.
  • The speakers approached the subject from the perspective that Web application security differs from traditional application security largely due to their rapid, often in-house development cycles based on “get it out now” business cultures.  
  • Key words include: security, web-based applications, OWASP

Background and Context

  • Beyond the Perimeter is an interview-style podcast series that began publishing in February 2009, hosted by BigFix, Inc., CTO Amrit Williams.
  • Beyond the Perimeter guests include luminaries and decision makers with expertise in enterprise information technology, computer security, system management and IT best practices. The content expressed on Beyond the Perimeter is the sole responsibility of the respective speakers and do not reflect the views of BigFix, Inc.
  • Amrit Williams has held a variety of engineering, management and consulting positions in the IT industry including research director in the Information Security and Risk Research Practice at Gartner, Inc. and engineering/management positions at nCircle Network Security, Consilient Inc., Network Associates, and McAfee. Williams is a Certified Information Systems Security Professional (CISSP) and a Certified Information Security Manager (CISM).

Episode #53 Notable Quotes from Doug Wilson

  • “OWASP is the Open Web Application Security Project. It’s an international organization and was started on the East Coast of the DC metropolitan area but it’s grown like crazy. The main focus of OWASP is trying to improve the Security Web applications around the world in Enterprising, Government and Private Sector.”
  • “The Web is a very different animal because in a lot of cases if you are not on the cutting edge you are falling behind… One of the things that we (OWASP) try and stress is people just need to consider the whole picture and include security into their process.”
  • “The Web introduced us all to the problems in the network security world. It introduces us to new and many other layers of complexity. People are being driven by business factors which are: do it now and do it quickly… without thinking about the implications.”
  • “We see the implications on a regular basis if you look at all the various different personally identifiable information breaches that have happened over the past couple of years. Especially if you are a large enough enterprise, the risk of doing this wrong is gigantic. It can damage your reputation, it can damage you financially and depending on what sector you are in, either of those can spell disaster; combining them both can pretty much put anything under business.”

Information Resources

About BigFix

Founded in 1997, the BigFix®, Inc. solutions support a global portfolio of A-list organizations in government, finance, retail, educational, industrial and public utility sectors. BigFix revolutionizes IT infrastructure management by replacing fragmented collections of single-purpose tools with the industry’s only unified visibility and control architecture that consolidates up to 18 security, IT compliance, decision support, and green computing functions. For more information, visit www.bigfix.com, follow BigFix on Twitter @BigFix, or stay in touch on the BigFix Facebook page, http://tinyurl.com/mvn9nu .

 

# # #

Nicole Colwell                       

Citigate Cunningham for BigFix, Inc.

415-442-4022           

ncolwell@citigatecunningham.com

 

© 2009 BigFix, Inc. All rights reserved. All company and product names mentioned herein may be trademarks of their respective companies.