Forget Shift Left. Shift Up Instead.
In this episode, Matt explains how development and security teams need to move away from strategies like shift left, which only focus on one part of the software development process. The alternative, Matt argues, is that teams should instead "shift up" to gain greater visibility of all supply chain risks.
ReversingLabs @ Inforsecurity Europe 2023
In this episode, Matt gives an overview of what’s to come for ReversingLabs at this year’s InfoSecurity Europe conference in London. Find ReversingLabs at booth #S60 for some great insight — and custom coffee!
Application Hacks vs. Software Supply Chain Hacks
In this episode, Matt explains how a modern Software Supply Chain Security platform prevents hacks that traditional app sec tools like SAST/DAST miss, such as malware insertion.
Behaviors and Diffs: Better Together for Software Security
In this episode, Matt Rose explains how software security is better with the wonder duo of behavior and differential analysis.
Who is ReversingLabs?
In this episode, Matt answers a simple yet important question: Who is ReversingLabs? Matt does this by recalling the company’s history, dating back to 2009, which began with ReversingLabs hosting the world’s largest reputational database for malware. He then details ReversingLabs’ growth into a leading provider of software supply chain security.
AI and Application Security: Proceed with Caution
In this episode, Matt touches on the newfound popularity of AI in relation to software security, pointing out the concerns he has for this technology being used by both good and bad actors.
What the heck is a Software Bill of Materials?
In this episode, Matt uses the analogy of America’s beloved boxed mac n’ cheese to define what a software bill of materials (SBOM) is and should be. He then points out that when making SBOMs, organizations should look to approved and standardized SBOM formats for them to be as clear and transparent as possible.
Supply Chain Risks in Art and Life ... Even 'The Simpsons'
In this episode, Matt touches on real-life software supply chain security cases such as the recent 3CX hack, and how popular media from past and present both imitates and forewarns this kind of threat.
Why CISA Secure by Design is Just a Starting Point
In this episode of ReversingGlass, Matt Rose explains what's included in the CISA's new initiative: Secure by Design, Secure by Default. He points out that while it's a good starting point for companies to refer to, it shouldn't serve as the end point for practicing software supply chain security.