The Application Security Podcast
The Application Security Podcast is a practitioner-led show for anyone building or securing modern software—and now AI-powered applications. Hosts Chris Romeo and Robert Hurlbut talk with the people shaping application security about AI and LLM security, threat modeling, secure development, OWASP, cloud, DevSecOps, security champions, and building programs that help engineering teams move faster and safer. With more than 300 episodes, the show turns real-world experience into practical guidance for developers, architects, AppSec professionals, and security leaders.
The Application Security Podcast
Mehran Koushkebaghi -- Security as a Systemic Concern: How to develop Anti-Requirements
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Mehran Koushkebaghi, a seasoned engineering expert, delves into the intricacies of systemic security. He draws parallels between civil engineering and IT systems, and explains the importance of holistic thinking in security design. Discover the difference between semantic and syntactic vulnerabilities and understand how anti-requirements play a critical role in system resilience. This episode offers fresh perspectives on application security. Mehran Koushkebaghi has 15 years of engineering experience across multiple industries, beginning as a structural engineer before discovering his passion for security. He sees parallels between designing resilient buildings and robust IT systems, applying a holistic engineering mindset in his work. With a master's in computer science and self-taught expertise in applied cryptography and cloud, Mehran continues shaping dependable IT solutions.
The Application Security Podcast is brought to you by Security Journey.
About Security Journey
We provide diverse training content and easy-to-digest lessons to meet individual learner needs.
→ Learn more about Security Journey
Connect with Mehran Koushkebaghi:
→ Peter Checkland
→ RSA Conference
Mentioned in this episode:
→ Peter Checkland
→ RSA Conference
→ Black Hat
→ Critical System Thinking Book
→ The Fifth Discipline
→ Understanding Complexity
→ Nassim Taleb books
Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook
Chapters:
00:00 Meet Mehran Koushkebaghi: Security as a Systemic Concern: How to develop Anti-Requirements
01:32 Yeah, we're going to explore a topic that we started a
07:31 Does resiliency mean in a civil engineering context
14:25 Because if you don't, if you don't understand that though, then
19:55 I did have a, I did have an odd question on
21:48 Yeah. Let me see if this— tell me if this works
24:11 Sure. So, Marin, let's take a look at semantic versus syntactic
40:39 Okay. Second one is, if you could display a single message
42:37 Yeah, they're dense. They're thick books. And there's a, you have
Follow the Application Security Podcast:
➜ Home: appsecpodcast.com
➜ X: @AppSecPodcast
➜ LinkedIn: The Application Security Podcast
➜ YouTube: @ApplicationSecurityPodcast
➜ Instagram: @appsecpodcast
➜ Facebook: Application Security Podcast
People on this episode
Podcasts we love
Check out these other fine podcasts recommended by us, not an algorithm.
The Security Table
Izar Tarandach, Matt Coles, and Chris Romeo