Moving from academic research to industry is non-trivial
I was recently interviewed for the Silver Bullet podcast, hosted by Gary McGraw where I discussed the advantages of industry over academic research, why it was non-trivial to start a business in Europe and where the Application Security industry is moving towards in the future.
While it was never my intention to start a business, I did because I saw too many companies struggling with the same problem; writing secure code is a challenge for most developers. We have an entire industry focused on finding security problems in code, and these problems are just piling up.
There are very few solutions that are actually focused on efficiently helping organizations and their development team that struggle with fixing the problems found, and even less on trying to prevent more problems being introduced in code. More and more, organizations are becoming aware of this vicious cycle and are realizing that their development team need to be trained on writing secure code from the beginning and they need to be equipped with the tools and processes to enable them.
If you want to know more about how Gary McGraw and myself see the industry moving forward, check out the the Silver Bullet podcast!
Show 139: Matias Madou discusses secure development training and software security testing research
https://www.synopsys.com/software-integrity/resources/podcasts/show-139.html
Govern AI-driven development before it ships
Measure AI-assisted risk, enforce secure coding policy at commit, and accelerate secure delivery across your SDLC.
Matias Madou, Ph.D.
Matias is a researcher and developer with more than 15 years of hands-on software security experience. He has developed solutions for companies such as Fortify Software and his own company Sensei Security. Over his career, Matias has led multiple application security research projects which have led to commercial products and boasts over 10 patents under his belt. When he is away from his desk, Matias has served as an instructor for advanced application security training courses and regularly speaks at global conferences including RSA Conference, Black Hat, DefCon, BSIMM, OWASP AppSec and BruCon.
Matias holds a Ph.D. in Computer Engineering from Ghent University, where he studied application security through program obfuscation to hide the inner workings of an application.
Resources to get you started
Lorem ipsum diam quis enim lobortis scelerisque fermentum dui faucibus in ornare quam viverra orci sagittis eu volutpat odio facilisis.
.png)
Today, Secure Code Warrior issued an all-new white paper covering a prescriptive, directional AI adoption model that security leaders can use to identify their adoption stage and make real progress in bringing the AI security risks within their organization under control.
