Bug Bounties, Pentesting, and Automated Security Workflows with Trickest’s Nenad Zaric

38:03
 
공유
 

Manage episode 348468741 series 3386287
Player FM과 저희 커뮤니티의 Skyflow 콘텐츠는 모두 원 저작자에게 속하며 Player FM이 아닌 작가가 저작권을 갖습니다. 오디오는 해당 서버에서 직접 스트리밍 됩니다. 구독 버튼을 눌러 Player FM에서 업데이트 현황을 확인하세요. 혹은 다른 팟캐스트 앱에서 URL을 불러오세요.

Companies use bug bounties and penetration testing to proactively look for vulnerabilities in their systems. These programs should be part of any security conscious organization.

However, even with these systems in place, it can be difficult to stay ahead of the hackers and potential attacks. Additionally, the tools available for running penetration tests can be complex to run and often require using a combination of tools.

Former pentester and bug bounty hunter Nenan Zaric joins the show to talk about the types of vulnerabilities that companies should be looking for and about how to automate security workflows through the Trickest platform, a company he founded. Nenad's advice from years of cybersecurity work is to be proactive and always attack yourself so that you can find the problems before the attacker does.

Topics:

  • Tell me about your history as a former penetration tester and bug bounty hacker. First, what is pentesting and bug bounty hacking
  • How did you get into this field and learn the skills necessary to hack into systems?
  • What are some of the common mistakes companies make when it comes to security that allows a hacker to penetrate their security?
  • How should companies think about protecting themselves and their customer data to prevent such attacks?
  • What is Trickest?
  • Is the idea of automating security workflows something new? How is this traditionally done and how does Trickest improve on the traditional model?
  • What are the common use cases that people are using Trickest for?
  • What sort of common attacks does Trickest help prevent?
  • Who’s your typical user? Is it a white collar hacker, like a pentester, or is it security professionals within an organization wanting to have an automated system for testing their security?
  • Walk me through how to set up an automated security workflow. What’s the output of a workflow?
  • How do the ready-made workflows work? What are some examples?
  • Where do these security workflows fit with the overall development process for a company? Is this an on-going thing that should be continually run and tested for weaknesses?
  • A large amount of attacks have a human element, social engineering and such, how does Trickest help prevent such attacks?
  • What are your thoughts on the future of security? Are we getting better at protecting and locking down systems?
  • What’s next for Trickest? Anything in the future roadmap that you can share?

Resources:

23 에피소드