ํŒŸ์บ์ŠคํŠธ

Canadian Cybersecurity, Open Source Risks, and AppSec Insights with Tanya Janca

๐ŸŽ™๏ธ Tune in to the latest #CryingOutCloud episode featuring Tanya Janca, where we dive into all things cloud!

Join Eden and Amitai as they welcome Tanya Janca, founder of 'We Hack Purple', and the author of 'Alice and Bob Learn Application Security'. She's seen it allโ€”from launching AppSec programs to teaching secure coding and leading on education at Semgrep.

In this episode: ๐ŸŒ Building security programs from scratch ๐Ÿ” The value of static analysis tools for developers ๐Ÿ‡จ๐Ÿ‡ฆ The Canadian cybersecurity landscape and her take on global challenges ๐Ÿ’ก Tips for securing AI applications in the age of generative AI

Crying Out Cloud๋Š” ๋‰ด์Šค๋ ˆํ„ฐ์ด๊ธฐ๋„ ํ•ฉ๋‹ˆ๋‹ค!

์•ˆ์ „ ๋ฐ ์ •๋ณด ์œ ์ง€: ์ตœ์‹  ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ๋‰ด์Šค, ์‹ค์ œ ๊ณต๊ฒฉ ์ธ์‚ฌ์ดํŠธ ๋ฐ ์ „๋ฌธ๊ฐ€ ์ง€์นจ์„ ๋ฐ›์•„ ํ™˜๊ฒฝ์„ ๋ณดํ˜ธํ•˜์‹ญ์‹œ์˜ค.

  • ๊ฒŒ์ž„์˜ ํŒ๋„๋ฅผ ๋ฐ”๊พธ๋Š” ๋‰ด์Šค

    ์—…๊ณ„๋ฅผ ๋’คํ”๋“ค๊ณ  ์žˆ๊ณ  ์—ฌ๋Ÿฌ๋ถ„์˜ ๊ด€์‹ฌ์ด ํ•„์š”ํ•œ ์ตœ์‹  ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ์ทจ์•ฝ์„ฑ๊ณผ ํ˜์‹ ์— ๋Œ€ํ•œ ์š”์•ฝ์ž…๋‹ˆ๋‹ค.

  • ๊ณ ์œ ํ•œ Wiz ์ธ์‚ฌ์ดํŠธ

    ์—ฐ๊ตฌ ๋ฐ์ดํ„ฐ ๋‚ด๋ถ€ ์‚ดํŽด๋ณด๊ธฐ - ์‹ค์ œ ํด๋ผ์šฐ๋“œ ํ™˜๊ฒฝ์—์„œ ํƒ์ง€ํ•œ ์‹ค์ œ ๊ณต๊ฒฉ ๊ฒฝ๋กœ์˜ ํ†ต๊ณ„๋ฅผ ๊ธฐ๋ฐ˜์œผ๋กœ ํ•ฉ๋‹ˆ๋‹ค.

  • ์‹ค์ „ ํ…Œ์ŠคํŠธ๋ฅผ ๊ฑฐ์นœ ์กฐ์–ธ

    ํšŒ์‚ฌ์—์„œ ๋ฐ์ดํ„ฐ ์นจํ•ด๋ฅผ ๋ฐฉ์ง€ํ•˜๋Š” ๋ฐฉ๋ฒ•๊ณผ ์ „๋ฐ˜์ ์ธ ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ ์ „๋žต์„ ๊ฐœ์„ ํ•˜๋Š” ๋ฐฉ๋ฒ•์— ๋Œ€ํ•œ ์œ„ํ˜‘ ์—ฐ๊ตฌ ํŒ€์˜ ํŒ์ž…๋‹ˆ๋‹ค.

ํด๋ผ์šฐ๋“œ ๋ณด์•ˆ์˜ ์ตœ์‹  ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐ›์€ ํŽธ์ง€ํ•จ์œผ๋กœ ์ง์ ‘ ๋ฐ›์œผ๋ ค๋ฉด ๋“ฑ๋กํ•˜์‹ญ์‹œ์˜ค.

Wiz๊ฐ€ ๊ท€ํ•˜์˜ ๊ฐœ์ธ ๋ฐ์ดํ„ฐ๋ฅผ ์ฒ˜๋ฆฌํ•˜๋Š” ๋ฐฉ๋ฒ•์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ์ฐธ์กฐํ•˜์‹ญ์‹œ์˜ค. ๊ฐœ์ธ์ •๋ณด์ฒ˜๋ฆฌ๋ฐฉ์นจ.