Click the link below to listen to Tech Bytes’ interview with Wabbi’s Founder & CEO, Brittany Greenfield. She talks with host, Dan Hafner about AppSec and DevSecOps.

This interview originally appeared on Spotify for Podcasters – Tech Bytes

About the session 

This session is a podcast episode where guest, Brittany Greenfield, discusses the importance of integrating security into software development with host, Dan Hafner. They delve into the challenges of cybersecurity, the role of artificial intelligence (AI), and the services offered by Brittany’s platform, Wabbi. 

Key speakers 

• Dan Hafner, Host 
• Brittany Greenfield, Founder and CEO of Wabbi 

Agenda 

• Introduction by Dan Hafner 
• Discussion on the importance of integrating security into software development 
• Introduction to Brittany Greenfield and her platform, Wabbi 
• Discussion on the challenges and potential solutions in cybersecurity 
• Discussion on the impact and potential risks of AI in cybersecurity 
• Conclusion and final thoughts 

Takeaways 

Takeaway 1: Security should be a core part of software development 

In the increasingly digitized world, application security is a crucial part of any organization’s cyber strategy. According to Brittany Greenfield, 9 out of 10 breaches begin due to defects in code. The conversation emphasized the importance of building security measures into the software development life cycle from the start. 

Greenfield explains, “You can’t really have a robust cybersecurity program if you’re only relying on perimeter security because that’s the point when you get breached. Application security is saying, let’s build this more securely.” She further adds, “We don’t build a house, tell everybody to move in and say don’t worry, we’ll check and see if it’s safe later.” 

The discussion highlighted the need to prioritize vulnerabilities – not every issue can be fixed, but it’s about identifying what must be fixed now, what can be fixed later, and what just needs to be monitored in case the risk profile changes. 

Takeaway 2: AI and cybersecurity: Opportunities and challenges 

Artificial Intelligence (AI) is making its mark in the cybersecurity landscape. While AI can be a force multiplier, helping to manage large data sets and automating processes, it also presents new challenges in the form of sophisticated fraud and the potential for increased vulnerabilities. 

Greenfield observes, “AI and cybersecurity is nothing new because of the large data sets that cyber has always generated, it’s always been a really fertile testing ground for AI.” She further adds, “AI can really help…it’s really going to be a force multiplier in the cybersecurity industry to say, hey, you know, it’s what we were just talking about some of what we do, right?” 

However, she warns of the dangers of AI, stating, “It’s easier for AI to make a fake Dan, whether it’s your voice or your picture…before somebody can catch it.” She suggests companies should manage AI with caution and common sense. 

Takeaway 3: The importance of risk management in software development 

In the realm of software development, risk management is paramount. Greenfield stresses the importance of considering an organization’s unique risk profile rather than assuming that a vendor’s security measures will suffice. She also highlights the often-overlooked human component of security. 

Greenfield states, “Do not assume that your risk profile is the same as your neighbors and that’s really what it is.” She further explains, “This could all happen overnight, right…You could argue that maybe I don’t haven’t watched it yet because I know too, too closely how this could happen.” 

Greenfield’s discussion offers a reminder that while technology continues to evolve rapidly, the human element remains a critical factor in managing and mitigating security risks. 

Insights surfaced 

• It’s crucial to include security in software development, as 9 out of 10 breaches begin due to defects in code. 
• Developers need to understand the importance of security and prioritize fixing vulnerabilities in their code. 
• Wabbi is a cybersecurity SaaS platform that translates security from development and vice versa, providing a platform for two parties that wouldn’t meet otherwise to connect. 
• AI is both a potential risk and a helper in cybersecurity. It can make social engineering easier, but it can also help manage the large data sets generated in cybersecurity. 
• The rapid evolution of technology is leading to a world where art imitates life, and vice versa, especially in the realm of cybersecurity. 

Key quotes 

• “We don’t build a house, tell everybody to move in and say don’t worry, we’ll check and see if it’s safe later. None of us would go into a building if we did that.” 
• “We translate security from development and development back into security.” 
• “The Japanese concept of wabi-sabi says let us accept the imperfection in things as a step towards enlightenment.” 
• “The industry has accepted that you can really only fix about 5% of vulnerabilities that you have in a given month.” 
• “AI and cybersecurity is nothing new because of that, The large data sets that cyber has always generated, it’s always been a really fertile testing ground for AI.” 
• “It’s not that you have to build perfect security, but you know, this is also why you’re more likely actually to see a small business attack. That’s where most of the breaches and payouts come from, because they know that they let their guard down.” 

Find out how you can bridge the gap between security and development once and for all.