Loading video...

Video Failed to Load

Go Home

Secure by design means building security into software from the start. Episode 164 of Cybersecurity Where You Are explores how software vendors and developers can apply these principles and prove they’re doing it right.

CISecurity's profile picture

Center for Internet Security (CIS)

43,178 subscribers

44,782 views • 10 months ago •via X (Twitter)

Science & TechnologyEducation
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Secure by design starts with action. Episode 164 of Cybersecurity Where You Are explores how software vendors can apply NIST’s Secure Software Development Framework and CIS guidance to strengthen security from the start. Listen now!
0:38

Secure by design starts with action. Episode 164 of Cybersecurity Where You Are explores how software vendors can apply NIST’s Secure Software Development Framework and CIS guidance to strengthen security from the start. Listen now!

Center for Internet Security (CIS)

78,937 views • 10 months ago

Forward Deployed Engineers from Palantir are the ideal people to build vertical AI startups Anyone can use these principles to learn about new industries yet untouched by software, and vibe coding means you can do it faster than ever
3:00

Forward Deployed Engineers from Palantir are the ideal people to build vertical AI startups Anyone can use these principles to learn about new industries yet untouched by software, and vibe coding means you can do it faster than ever

Garry Tan

246,697 views • 1 year ago

We’re all building our own software factories. But, our coding and code review agents are missing a curated map of the software they’re working on: how repositories connect, what depends on what, and where a change can have an impact. That’s why we built Software Map in Qodo 🚀 Install Qodo and get your software map within hours. Watch the video for examples and a closer look.
2:49

We’re all building our own software factories. But, our coding and code review agents are missing a curated map of the software they’re working on: how repositories connect, what depends on what, and where a change can have an impact. That’s why we built Software Map in Qodo 🚀 Install Qodo and get your software map within hours. Watch the video for examples and a closer look.

Itamar Friedman

160,781 views • 1 month ago

Each year, our scientists, engineers, and developers create software packages to manage space missions, test spacecraft, and analyze data from research satellites. Through our new software catalog you can download and use these programs for free!
0:52

Each year, our scientists, engineers, and developers create software packages to manage space missions, test spacecraft, and analyze data from research satellites. Through our new software catalog you can download and use these programs for free!

NASA Technology

833,428 views • 3 years ago

Where "Open Source" Came From The internet can feel like a part of the landscape, but all our software was intelligently designed—and so were the social systems which produce that software. Christine Peterson tells Ben Landau-Taylor about the struggle to define "open source software". 0:00 — Intro 1:11 — The hackers who built the internet 9:53 — The “Free software” problem 14:37 — The genesis of “open source” 18:20 — The power of doing the legwork 19:44 — How the name took off 27:00 — Cultures are intelligently designed 29:04 — Funding open source software 32:53 — Succession 35:20 — AI and software security 43:42 — The first software security crisis
46:35

Where "Open Source" Came From The internet can feel like a part of the landscape, but all our software was intelligently designed—and so were the social systems which produce that software. Christine Peterson tells Ben Landau-Taylor about the struggle to define "open source software". 0:00 — Intro 1:11 — The hackers who built the internet 9:53 — The “Free software” problem 14:37 — The genesis of “open source” 18:20 — The power of doing the legwork 19:44 — How the name took off 27:00 — Cultures are intelligently designed 29:04 — Funding open source software 32:53 — Succession 35:20 — AI and software security 43:42 — The first software security crisis

The Students

15,709 views • 2 months ago

Global finance doesn’t fail from lack of innovation—it falters due to regulatory friction and inconsistent rules across borders. But what if compliance could adapt dynamically instead? 🤔 On #Unshielded, Jillian Plomin || W3i Software, Inc CEO explores a future where transactions are regulation-aware by design, revealing only what’s needed, where it’s needed. Full episode 👇
0:56

Global finance doesn’t fail from lack of innovation—it falters due to regulatory friction and inconsistent rules across borders. But what if compliance could adapt dynamically instead? 🤔 On #Unshielded, Jillian Plomin || W3i Software, Inc CEO explores a future where transactions are regulation-aware by design, revealing only what’s needed, where it’s needed. Full episode 👇

Midnight

27,819 views • 10 months ago

Evals 101: a new course from Braintrust. Everything you need to know about evals, and how to do them yourself. Module one: Why are evals important? - the six most common problems developers face when shipping AI applications - why traditional software thinking doesn't apply to AI - how evals can fix these problems
1:51

Evals 101: a new course from Braintrust. Everything you need to know about evals, and how to do them yourself. Module one: Why are evals important? - the six most common problems developers face when shipping AI applications - why traditional software thinking doesn't apply to AI - how evals can fix these problems

Braintrust

37,043 views • 6 months ago

Is the "one size fits all" software model dead? In this episode of the GitHub Podcast, Cassidy and Kedasha explore the rise of personal software tools built by developers for themselves, and shared with the world through open source.
0:47

Is the "one size fits all" software model dead? In this episode of the GitHub Podcast, Cassidy and Kedasha explore the rise of personal software tools built by developers for themselves, and shared with the world through open source.

GitHub

17,494 views • 7 months ago

“Developers are terraforming the battlefield that defenders have to fight on.” In this episode of the Microsoft Threat Intelligence Podcast, the authors of the new book “Threat-Driven Software Development: Defending Online Services from Modern Threat Actors” discuss why modern software security must be guided by how attackers actually operate. Drawing on their experiences across threat intelligence, software engineering, identity security, and threat modeling, Michael Howard, Lee Holmes, Sherrod DeGrippo, and Shawn Hernan begin every chapter with a threat intelligence perspective, using real-world attacker techniques to frame the technical guidance that follows. Watch the latest podcast episode to learn what inspired the book and what the authors hope readers will learn. You can get “Threat-Driven Software Development: Defending Online Services from Modern Threat Actors” here:
0:45

“Developers are terraforming the battlefield that defenders have to fight on.” In this episode of the Microsoft Threat Intelligence Podcast, the authors of the new book “Threat-Driven Software Development: Defending Online Services from Modern Threat Actors” discuss why modern software security must be guided by how attackers actually operate. Drawing on their experiences across threat intelligence, software engineering, identity security, and threat modeling, Michael Howard, Lee Holmes, Sherrod DeGrippo, and Shawn Hernan begin every chapter with a threat intelligence perspective, using real-world attacker techniques to frame the technical guidance that follows. Watch the latest podcast episode to learn what inspired the book and what the authors hope readers will learn. You can get “Threat-Driven Software Development: Defending Online Services from Modern Threat Actors” here:

Microsoft Threat Intelligence

12,764 views • 3 months ago

We asked Dylan Field about organizational design in the age of AI, the importance of design. "As the inputs to software change, as more people are creating software, design becomes the differentiator." "Two decades ago, design was lipstick on a pig." "Design now is how you win or lose. We're going to start seeing so many more designer CEOs and design-oriented folks who are leading and shaping the future of software and companies." "Incredible designers are more in demand than ever. Good luck recruiting them because they have 50 other offers and infinite optionality."
3:34

We asked Dylan Field about organizational design in the age of AI, the importance of design. "As the inputs to software change, as more people are creating software, design becomes the differentiator." "Two decades ago, design was lipstick on a pig." "Design now is how you win or lose. We're going to start seeing so many more designer CEOs and design-oriented folks who are leading and shaping the future of software and companies." "Incredible designers are more in demand than ever. Good luck recruiting them because they have 50 other offers and infinite optionality."

TBPN

27,940 views • 1 year ago

The Future of Software Engineering Pete Koomen AI will bring the cost of building software down to zero, but this means we’ll need MORE human developers, not fewer. We’d like to fund startups building tools for this future.
0:48

The Future of Software Engineering Pete Koomen AI will bring the cost of building software down to zero, but this means we’ll need MORE human developers, not fewer. We’d like to fund startups building tools for this future.

Y Combinator

209,184 views • 1 year ago

ROCm 7 is built for developers: open, accessible, and fast. Mark Papermaster and Anush Elangovan break down how the AMD open software stack for AI makes it easier for developers in the latest episode of Advanced Insights. Watch this clip 👇 and see the full episode:
1:28

ROCm 7 is built for developers: open, accessible, and fast. Mark Papermaster and Anush Elangovan break down how the AMD open software stack for AI makes it easier for developers in the latest episode of Advanced Insights. Watch this clip 👇 and see the full episode:

AMD

18,665 views • 1 year ago

Garry Tan, President and CEO of Y Combinator, on what agentic software teams can do today: "you can go from zero to 15 mil ARR in about four months with like two or three people and like hundreds of agents, like, you know, a few hundred skill files." "building these agentic systems today I think that all you doing is you seeing where the bottlenecks are" "how do I just instruct the agent to create a piece of software or a markdown file that blows away that roadblock?"
1:31

Garry Tan, President and CEO of Y Combinator, on what agentic software teams can do today: "you can go from zero to 15 mil ARR in about four months with like two or three people and like hundreds of agents, like, you know, a few hundred skill files." "building these agentic systems today I think that all you doing is you seeing where the bottlenecks are" "how do I just instruct the agent to create a piece of software or a markdown file that blows away that roadblock?"

Guillermo Flor

111,921 views • 2 months ago

pov: you’re building your own insane design tools.. ​why use standard software when you can reinvent the craft from scratch? wizards »
0:22

pov: you’re building your own insane design tools.. ​why use standard software when you can reinvent the craft from scratch? wizards »

Aurelien

39,246 views • 8 months ago

UNAPPROVED SOFTWARE ON VOTING MACHINES Watch Full Episode Here: On Episode 77 of Going Rogue with Lara Logan, cybersecurity whistleblower Robert Mancini walks Lara through a troubling discovery uncovered through public records and right to know requests. Mancini explains that a third party software, MathNet.Numerics, appeared on a voting system software manifest even though it was not listed in official certification reports from either the state or the Election Assistance Commission. Because voting machines are considered critical infrastructure, they operate on strict whitelisting standards where only approved software is allowed. The presence of unlisted, off the shelf software raises serious questions about oversight and compliance. According to Mancini, searches of EAC records and certification documentation showed no evidence that this software was ever tested or approved despite being present on the machines. Let Dr. Stella Help You Stock Your Medicine Cabinet Promo Code LARA #ElectionIntegrity #CyberSecurity #Whistleblower #VotingMachines #LaraLogan
2:48

UNAPPROVED SOFTWARE ON VOTING MACHINES Watch Full Episode Here: On Episode 77 of Going Rogue with Lara Logan, cybersecurity whistleblower Robert Mancini walks Lara through a troubling discovery uncovered through public records and right to know requests. Mancini explains that a third party software, MathNet.Numerics, appeared on a voting system software manifest even though it was not listed in official certification reports from either the state or the Election Assistance Commission. Because voting machines are considered critical infrastructure, they operate on strict whitelisting standards where only approved software is allowed. The presence of unlisted, off the shelf software raises serious questions about oversight and compliance. According to Mancini, searches of EAC records and certification documentation showed no evidence that this software was ever tested or approved despite being present on the machines. Let Dr. Stella Help You Stock Your Medicine Cabinet Promo Code LARA #ElectionIntegrity #CyberSecurity #Whistleblower #VotingMachines #LaraLogan

Lara Logan

29,105 views • 6 months ago

Now you can build any software with Retool, including portals for customers, partners, and vendors.
0:23

Now you can build any software with Retool, including portals for customers, partners, and vendors.

Retool

32,943 views • 3 years ago

Benedict Evans says AI means more software, not less: "There's going to be a bunch of stuff you could do with software that you just couldn't do before at all. And so there will be more competition." "If you think about the enterprise software fleet today, you've got three buckets... big iron horizontal systems, so SAP and Workday and your CRM... vertical software... and then in the middle, this fuzzy improvised space of Excel and email and the shared file system." "Now you add ChatGPT to that. Do you do that in an LLM? Is there an LLM tool that means you can do that in Salesforce where you couldn't do it before, or you can do it in your vertical app that you couldn't do before?" "All of which is a long way of saying, what does this do to software? And it must be more software. Way more software." Benedict Evans with Erik Torenberg
1:36

Benedict Evans says AI means more software, not less: "There's going to be a bunch of stuff you could do with software that you just couldn't do before at all. And so there will be more competition." "If you think about the enterprise software fleet today, you've got three buckets... big iron horizontal systems, so SAP and Workday and your CRM... vertical software... and then in the middle, this fuzzy improvised space of Excel and email and the shared file system." "Now you add ChatGPT to that. Do you do that in an LLM? Is there an LLM tool that means you can do that in Salesforce where you couldn't do it before, or you can do it in your vertical app that you couldn't do before?" "All of which is a long way of saying, what does this do to software? And it must be more software. Way more software." Benedict Evans with Erik Torenberg

a16z

36,975 views • 5 months ago

Embarking on a new journey into tech, a fresh start in your career? Our Software Engineering Bootcamp is beginner-friendly. Master the art of crafting web products and software solutions in just 23 weeks. Apply Now for February Intake. Online and physical classes are available!
0:54

Embarking on a new journey into tech, a fresh start in your career? Our Software Engineering Bootcamp is beginner-friendly. Master the art of crafting web products and software solutions in just 23 weeks. Apply Now for February Intake. Online and physical classes are available!

Moringa School

5,427,566 views • 2 years ago