Page title

Section title

151: Software Bills of Behavior with Andrew Hendela

Simply knowing what is in your software is not any guarantee of safety. We need to know what that software does versus what we expect it to do. We need to know its rules of behavior.


Today, we talk with Andrew Hendela, a founder of Karambit.ai, a company dedicated to automatically detecting malware and securing your software supply chain. Andrew worked for over a decade automating hard cybersecurity problems. He has many years of experience in cybersecurity leadership and deep technical expertise in fields such as malware analysis and automated cyber attribution. He tells us about software bills of behavior and why SBOMs are insufficient to protect your software supply chain from attacks. 

When you finish listening to the episode, connect with Andrew on LinkedIn and visit Karambit.ai website. 

Mentioned in this episode:

Andrew on LinkedIn at https://www.linkedin.com/in/andrew-hendela/

Karambit.ai at https://karambit.ai 

Additional Info

Legacy Code Rocks

Legacy Code Rocks explores the world of modernizing existing software applications.

About

In this show, hosts M. Scott Ford and Ray Myers are out to change the way you think about legacy code.

If you're like a lot of people, when you hear the words "legacy code" it conjures up images of big mainframes and archaic punch card machines. While that's true — it only tells a small part of the story. The code you leave behind is your legacy, so let's make it a good one.

Listen

Engage

© 2025 Corgibytes, LLC Content licensed under Creative Commons CC BY-SA.