Finding a Use for GenAI in AppSec - Keith Hoodlet - ASW #323
25 March - 54 minsLLMs are helping devs write code, but is it secure code? How are LLMs helping appsec teams? Keith Hoodlet returns to talk about where he's seen value from genAI, where it fits in with tools like source code analysis and fuzzers, and where its limitations mean we'll be relying on humans for a while. Those limitations don't mean appsec should dismiss LLMs as a tool. It means appsec should understand how things like context windows might limit a tool's security analysis to a few files, leaving a security architecture review to humans.
Segment resources:
https://securing.dev/posts/ai-security-reasoning-and-bias/ https://seclists.org/dailydave/2025/q1/0 https://arxiv.org/pdf/2409.16165 https...
Series Episodes
Tapjacking, ZuChe, PerfektBlue, McHacking, OT in the IT, Add Ons, Josh Marpet... - SWN #493
33 mins
11 July Finished
SolarWinds Settlement, Upgrade Your Leadership Instincts to Build Your Legacy - BSW #403
51 mins
9 July Finished
Spying on your kids, Bank Robberies, Qantas, LOTL, sudo, Hunters, Aaran Leyland... - SWN #492
33 mins
8 July Finished
Checking in on the State of Appsec in 2025 - Janet Worthington, Sandy Carielli - ASW #338
1 hour 7 mins
8 July Finished
