Podcast 5

OWASP Podcast Series #5 Interview with Gary McGraw Recorded January 15, 2009 http://images.apple.com/itunes/overview/images/overview-icon-itunes20081106.jpg https://www.owasp.org/images/d/d3/Feed-icon-32x32.png direct download

Participants
- Gary McGraw is the CTO of Cigital. - Jim Manico is a Web Application Architect and Security Engineer for Aspect Security.

Interview with Gary McGraw
- Why do you insist on use of the term “software security” as opposed to “application security”? - What is static analysis good for and what is it no good for? - What is the exact relationship between Cigital and Fortify? - Why do you think your “top 19” is any better than the OWASP top 10 or the CWE top 25? - Why does Cigital have a proprietary approach to IP? - What makes the Touchpoints any better than the SDL or CLASP? - What is your relationship with Allan Paller and SANS? - And more!

Intro Music by Rhine Singleton and Gary McGraw
- Song "To You Right Now" from the album 100 Feet Above the Ground - Guitar and vocals: Rhine Singleton - Mandolin, fiddle, and vocals: Gary McGraw - Produced by Gary McGraw