J.B Frierson

Technology Leader @snyksec, Applying 1st principle thinking to DevSecOps. All my opinions are my own.

[J.B Frierson @JBFrierson]

Check out my latest article: From Chaos to Clarity: Weaving Your Way Through the Current Remediation Market https://t.co/1BqTGKfzg1 via @LinkedIn

[J.B Frierson @JBFrierson]

AI facts: Bard, ChatGPT, CodeWhisperer… built LLM models on top of open source projects.

The code birthed from AI is a derivative of open source projects.

Well if so that so, how can companies feel safe leveraging the power of AI?

We’re discussing Thursday.

Link in bio.

[J.B Frierson @JBFrierson]

AI. AI. AI. Yes, it’s the hottest topic in the town square.

Seasoned CISOs have seen disruptive tech in the past but always find ways to embrace it nonetheless.

@stuartdross - CEO of FossID - and I, will be sharing thoughts about how to safely embrace AI on 6/15. Link in bio.

[J.B Frierson @JBFrierson]

I was chatting with a CISO friend last week and she told me:

“Today I’m looking to maximize budget - not slash unconsciously.

When evaluating my equation is:

Cost Effective + Delivers more Secure Outcomes + Adequate Internal Resources = A Maximized Budget”

Thoughts?

[J.B Frierson @JBFrierson]

I see a world where everything is connected - leading to an omnipresent appsec experience.

Appsec will be baked into every facet of building software - being remediated as it’s created.

Right now it’s artisanal but in the future, it will look like modern manufacturing.

[J.B Frierson @JBFrierson]

You can’t operationalize IaC without automation.

You can’t automate without unified policy engine.

#BartleyQuotes #firstprinciplesthinking

[J.B Frierson @JBFrierson]

Many of my CISO friends now are responsible for shipping secure code - with the CTO being the previous owner.

This "hot potato" is putting new faces in new rooms.
Successful CISOs are choosing dev-centric tools and catching the potato with oven mitts. #firstprinciplesthinking

[J.B Frierson @JBFrierson]

The IaC space is at a crossroads. Many many chefs in the kitchen but not much remediation in sight - all visibility.

In the near future, I expect partners to consolidate on fix-focused vendors just we’re seeing in the cloud security (CNAAP) space.

#firstprinciplesthinking

[J.B Frierson @JBFrierson]

Shipping secure code today is the defacto standard. Winning in that arena and cloud security will determine who wins this round vs “the hackers.”

#firstprinciplesthinking

[J.B Frierson @JBFrierson]

Visibility + Prioritization + Fix at Scale = Secure Outcomes #firstprinciplesthinking

[J.B Frierson @JBFrierson]

It’s important to know the financial background of the AST tooling that you’re partnering with:

Are they PE owned? Or VC backed?
How many people do they have focused on R&D? How much $ do they have on their balance sheet?

The future is bright for those with the most options.

[J.B Frierson @JBFrierson]

Starting a dopamine detox today to focus on delivering secure outcomes for my partners. Anyone have any success stories post detox? (I’ll be checking tomorrow 😎) #strongerthanyesterday #firstprinciplethinking

[J.B Frierson @JBFrierson]

Change is hard, but insanity is when one keeps doing the same thing over and over expecting different results. If it were up to me, all developers would have access to secure tooling. #firstprinciplethinking

[J.B Frierson @JBFrierson]

Gone are the days that developers focus only on developing & security focuses only on security. Today, everyone is accountable. #firstprinciplethinking

[J.B Frierson @JBFrierson]

12 years ago software ate the world. Now we’re finding ways to deal with the cavities of securing & deploying bad code. #firstprinciplethinking