Pete Chestna is an advocate for SAST, DAST, and IAST tools and a passionate #AppSec enthusiast. Pete shared A moving quote during this episode: &quot;an #AppSec program is the byproduct of building secure developers.” #TruthPete describes the differences between SAST, DAST, IAST, and RASP. The struggles developers encounter using new tools, false positives and how to reduce them, and advice for building an #AppSec program from scratch versus adding tools to a mature program.You can find Pete on Twitter <a href='https://twitter.com/petechestna'>@PeteChestna</a>.Additional information on this topic:<ul><li>TechBeacon learning article for more details on the differences between AppSec testing tools<ul><li><a href='https://learn.techbeacon.com/units/sast-dast-iast-rasp-pros-cons-how-choose'>SAST, DAST, IAST, and RASP: Pros, cons and how to choose</a></li></ul></li></ul>FOLLOW OUR SOCIAL MEDIA: ➜Twitter: <a href='https://twitter.com/AppSecPodcast'>@AppSecPodcast</a> ➜LinkedIn:<a href='https://www.linkedin.com/showcase/83990241'> The Application Security Podcast</a> ➜YouTube: <a href='https://www.youtube.com/channel/UCfrTGqjSsFCQW4k6TueuY-A'>https://www.youtube.com/@ApplicationSecurityPodcast</a> Thanks for Listening! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Katy Anton -- OWASP Top 10 #4 XXE

Chris Romeo and Robert Hurlbut dig into the tips, tricks, projects, and tactics that make various application security professionals successful. They cover all facets of application security, from threat modeling and OWASP to DevOps+security and security champions. They approach these stories in an educational light, explaining the details in a way those new to the discipline can understand. Chris Romeo is the CEO of Devici and a General Partner at Kerr Ventures, and Robert Hurlbut is a Principal Application Security Architect focused on Threat Modeling at Aquia.