Finding a Use for GenAI in AppSec - Keith Hoodlet - ASW #323
25 March 2025 - 54 minsLLMs are helping devs write code, but is it secure code? How are LLMs helping appsec teams? Keith Hoodlet returns to talk about where he's seen value from genAI, where it fits in with tools like source code analysis and fuzzers, and where its limitations mean we'll be relying on humans for a while. Those limitations don't mean appsec should dismiss LLMs as a tool. It means appsec should understand how things like context windows might limit a tool's security analysis to a few files, leaving a security architecture review to humans.
Segment resources:
https://securing.dev/posts/ai-security-reasoning-and-bias/ https://seclists.org/dailydave/2025/q1/0 https://arxiv.org/pdf/2409.16165 https...
Series Episodes
The Future Of Proactive Security Before Building an AI Enabled Enterprise - Erik Nost - BSW #430
55 mins
14 January Finished
Are you dead?, AI Hellscape, Copilot, Blue Delta, Quishing, Confer, Aaran Leyland... - SWN #546
36 mins
13 January Finished
The State of Cybersecurity Hiring, 2026 content plans, and the weekly news - ESW #441
1 hour 35 mins
12 January Finished
Nudification, Spying, Ni8mare, Cisco, Chat-GPT, Chrome, SaaS, CES, Josh Marpet & More - SWN #545
38 mins
9 January Finished
