Joshua Corman
where else to find them
what they talk about
all 8 in the filters
where they keep going back
- RSA Conference6 editions2011–2024
- RSAC Conference3 editions2021–2023
- AppSecUSA3 editions2013–2016
all 10 in the filters
on a stage with
- David Etue3×
- Adrian Cockcroftonce
- Anita D'Amicoonce
all 26 in the filters
who talks about the same things
- Alyssa Miller12 talks
- Jeff Williams13 talks
- Caroline Wong24 talks
- Aaron Bedra14 talks
- James Wickett14 talks
- Christopher R Robinson24 talks
| title | conference | date |
|---|---|---|
| Getting Serious: Critical Disruptions/Thinking/Responses (& Rumors of War) | RSA Conference 2024 | 2024-05-06 |
Criminal attacks are already degrading water, food, power and hospitals, with Change Healthcare’s outage affecting 94% of US hospitals surveyed and a reported… | ||
| Food for Thought: Safer Models For Our Most Vital Critical Infrastructure | RSAC 2023 | 2023-04-24 |
Presenter: Joshua Corman, Vice President, Cyber Safety Strategy, Claroty
When everything is critical, nothing is. The 16 Sector, stove-piped model for… | ||
| The Opposite of Transparency | RSA Conference 2023 | 2023-04-24 |
Argues that machine-readable SBOM data is the practical fix for opaque software supply chains, showing concrete results: teams with SBOMs plus automated CI/CD… | ||
| More Than a CSIRT: Lessons Learned from Supporting a National Response to COVID-19 | 34th Annual FIRST Conference 2022 | 2022-06-26 |
CISA forms a COVID Task Force that pairs federal analysts with temporary experts, assesses the vaccine cold chain and tiered supply chain (tier 0 = R&D, tier 1… | ||
| Dangerous: Critical Conversations About CISA’s “Bad Practices” | RSAC 2022 | 2022-06-06 |
Presenters:
Donald Benack III, Deputy Associate Director, Cybersecurity and Infrastructure Security Agency
Joshua Corman, Founder, I am The Cavalry (dot… | ||
| AppSec’s Future and the Rise of the Chief Product Security Officer | RSAC 2021 | 2021-05-17 |
Claim: classic AppSec no longer scales and organizations must create a Chief Product Security Officer role to manage productized software, supply chains and… | ||
| How CISA Is Charting a Path Toward Defensible Infrastructure | RSAC 2021 | 2021-05-17 |
CISA maps the CISA Services Catalog into the Cyber Defense Matrix to spot gaps, then evaluates agency posture with five layers: recipes, pantry, grocery store… | ||
| RSAC TV: Josh Corman Interview | RSA Conference 2017 | 2017-02-13 |
Josh Corman, Founder (& Director, Cyber Statecraft at Atlantic Council), I am The Cavalry (dot org) is interviewed by Paul Roberts, Editor in Chief and Founder… | ||
| Abu Dhabi: Interview Josh Corman & David Etue | RSA Conference 2016 Abu Dhabi | 2016-11-15 |
Brenna Dobbins of RSA Conference speaks with Josh Corman, Director of the Cyber Statecraft Initiative, The Atlantic Council, and David Etue, VP, Managed… | ||
| Building Bridges: Surprising Strategies and Teammates for Infosec Success | RSA Conference 2016 Abu Dhabi | 2016-11-15 |
David Etue, VP, Managed Security Services, Rapid7
Joshua Corman, Director of the Cyber Statecraft Initiative, The Atlantic… | ||
| [AUDIO] Should there be an Underwriters Laboratories certification for software in IoT products? | AppSecUSA 2016 | 2016-10-11 |
Proposal claims a CyberUL will raise IoT security by requiring publish a software bill of materials, no known CVEs without mitigation, and must be patchable… | ||
| Safer at Any Speed: The Road to Automotive CyberSafety | RSA Conference 2016 | 2016-02-29 |
Joshua Corman, Founder, I am The Cavalry (dot org)
Security Issues in Transportation: Need for Collaboration for Solutions - Examine research on IoT and car… | ||
| Immutable Awesomeness? | DevOps Enterprise Summit 2015 | 2015-11-03 |
Argues that pairing containers with software supply‑chain practices reduces unplanned work by improving traceability and hygiene: shows apps average 106… | ||
| Wait, Wait! Don't pwn Me! | AppSecUSA 2015 | 2015-09-22 |
A live quiz format mines recent AppSec news and gives concrete takeaways: Ashley Madison breach — CEO resigns in 10 days, Volkswagen emissions scandal — CEO… | ||
| What is Rugged all About? | GOTO London 2015 | 2015-09-16 |
Argues that fixing software supply chains cuts broken releases and security debt: 41 OpenSSL CVEs one year, Maven Central sees 17 billion downloads, average… | ||
| Panel | GOTO London 2015 | 2015-09-16 |
Panel reports a measurable link between DevOps practices and firm performance using a cross-sectional survey with objective measures (stock tickers, company… | ||
| Panel Discussion Led by – Joshua Corman | GOTO London 2015 | 2015-09-16 |
Advocates hire developers into security because coding skills shorten ramp time about fivefold and teams prefer people who can write code not just write… | ||
| Continuous Acceleration: Why Continuous Everything Requires A Suppl... | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Argues that continuous delivery plus DevOps forces a software supply chain mindset: countable failures (Heartbleed is one of 31 CVEs that year, 600,000… | ||
| DOES14 - Joshua Corman - Sonatype | DevOps Enterprise Summit 2014 (San Francisco 2014) | 2014-10-28 |
Argues software behaves like a software supply chain, not bespoke craft, citing Maven Central serving ~13 billion requests and IoT driving that toward ~25… | ||
| Panel Discussion: Ask an Auditor Anything: DevOps Compliance | DevOps Enterprise Summit 2014 (San Francisco 2014) | 2014-10-28 |
A toolkit called DevOps Audit Defense Toolkit maps classic controls (separation of duties, change management, management oversight) to DevOps evidence and… | ||
| Not Go Quietly Adaptive Strategies and Unlikely Teammates | OWASP AppSecUSA 2014 | 2014-09-16 |
Argues that targeted influence beats one-size-fits-all security: use procurement to force vendor SDLC and contract penalties, use general counsel to win… | ||
| 11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey | OWASP AppSecUSA 2014 | 2014-09-16 |
Four-year survey covers 3,300 responses in April 2014 (11,000 total to date) and delivers hard numbers: 75% of organizations don’t enforce open-source… | ||
| The Cavalry Is US: Protecting the public good | AppSecUSA 2013 | 2013-11-20 |
Asserts that “the cavalry isn¹t coming” and organizes a movement that actually builds channels: a public mailing list and Google group, a two‑day… | ||
| Survival Isn't Mandatory: Challenges and Opportunities of DevOps | RSA Conference Europe 2013 | 2013-10-29 |
DevOps (development + operations) is a game-changer and may be the end of security as we know it. The ludicrous velocity of change is far greater than bolt-on… | ||
| Pecha Kucha Night – Josh Corman | RSA Conference 2011 | 2011-02-14 |
Visit http://www.rsaconference.com for more information about the RSA® Conference | ||
| nothing matches | ||