Person
person:tanya_janca
Also: Tanya
Application-security practitioner and guest who tells the episode’s stories.
Application-security practitioner and guest who tells the episode’s stories.
“Today I have the pleasure of sitting down and hearing stories from Tanya Janca.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ASSOCIATED_WITH | Application security | Explicit | 165 |
| outgoing | USES | penetration testing | Explicit | 165 |
| outgoing | USES | Burp Suite | Explicit | 165 |
| outgoing | USES | Server-side request forgery | Derived | 165 |
| outgoing | USES | incident response | Explicit | 165 |
| outgoing | USES | Wireshark | Explicit | 165 |
| outgoing | USES | Capture the Flag | Explicit | 165 |
| outgoing | USES | SQL injection | Explicit | 165 |
| outgoing | ASSOCIATED_WITH | Canadian government | Explicit | 165 |
| outgoing | ASSOCIATED_WITH | Defcon | Explicit | 165 |
| incoming | DISCOVERED_BY | Server-side request forgery | Explicit | 165 |
Tanya Janca ASSOCIATED_WITH Application security
Tanya's professional focus is application security, or appsec.
Explicit Confidence 99% · Jack Rhysider EP 165 Details
“that’s called appsec, application security. She’s laser-focused on how applications become insecure and how to make them secure.”
Tanya Janca USES penetration testing
Tanya was recruited to help perform penetration tests.
Explicit Confidence 97% · Jack Rhysider EP 165 Details
“You can help me do some penetration test.”
Tanya Janca USES Burp Suite
Tanya learned and used Burp Suite as part of her penetration-testing work.
Explicit Confidence 96% · Tanya Janca EP 165 Details
“go learn Burp Suite this weekend”
“I just found server-side request forgery.”
Server-side request forgery DISCOVERED_BY Tanya Janca
Tanya says she found server-side request forgery while testing an application.
Explicit Confidence 98% · Tanya Janca EP 165 Details
“I found server-side request forgery.”
Tanya Janca USES Server-side request forgery
While penetration testing, Tanya entered code that resulted in server-side request forgery and unintended file operations.
Derived Confidence 84% · Tanya Janca EP 165 Details
“Inadvertently, I started copying and deleting files on the web server.”
“I found server-side request forgery.”
Tanya Janca USES incident response
Tanya led incident responders and managed serious security incidents.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, I was the lead of the incident responders.”
“I’m the head of incident response.”
Tanya Janca USES Wireshark
Tanya directed her team to use Wireshark to investigate the supposed malware incident.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“someone flip on Wireshark.”
Tanya Janca USES Capture the Flag
Tanya participated in CTFs and organized two women's CTF teams.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“I did do a few CTFs.”
“we had to form two teams”
Tanya Janca USES SQL injection
Tanya used SQL injection to bypass a login screen during a CTF.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“I’m sure there’s gonna be some sort of SQL injection opportunity.”
“we got in.”
Tanya Janca ASSOCIATED_WITH Canadian government
Tanya held a security leadership position at an organization within the Canadian government.
Explicit Confidence 98% · Jack Rhysider EP 165 Details
“a security leadership position at an organization which was within the Canadian government”
Tanya Janca ASSOCIATED_WITH Defcon
Tanya attended Defcon and took a blind SQL injection workshop there.
Explicit Confidence 99% · Tanya Janca EP 165 Details
“So, then I went to Defcon and I did a workshop called Blind SQL Injection.”