Jeremiah Grossman: C-NET podcast with SPI Dynamics, Watchfire, and WhiteHat

Monday, June 25, 2007

C-NET podcast with SPI Dynamics, Watchfire, and WhiteHat

Several weeks ago Joris Evers (CNET) hosted a web security podcast with Danny Allan (Watchfire), Jeremiah Grossman (WhiteHat Security), and Michael Sutton (SPI Dynamics). The question revolved around comparing old vs. new. Microsoft vs. Google/Yahoo, desktop security vs. web security, and traditional attacks vs. Web 2.0 attacks. Basically are the problems the same as always or are we dealing with brand new threats?

For my part I think the best practices are the same ol' input validation issues we've always had. Attacks like XSS, CSRF, and SQL Injection are certainly unique. Also what's different is the scale of the problem and its potential impact. At no time in history has software (web applications) been available 1 billion people.

No comments:

Post a Comment

BIO

Jeremiah Grossman brings 20+ years of experience in Computer Security and has become one of the most recognizable and world-renowned cybersecurity experts in the industry, coining several of the original hacking terms commonly used around the world today. Early in his career, Jeremiah was known as “The Hacker Yahoo” which led to his role as the company’s Information Security Officer. Jeremiah founded WhiteHat Security (now Synopsis), and served as Chief of Security Strategy for SentinelOne which was the highest-valued cybersecurity IPO in history. Most recently, Jeremiah was the founder & CEO of Bit Discovery, which was acquired by Tenable in 2022. He also serves as a company advisor and board member to several tech startups. In his spare time, Jeremiah does Brazilian Jiu-Jitsu and is passionate about classic cars. He recently opened Toybox, a luxury car club in Boise, Idaho.