Cloud Security - The Latest Innovations to Protect Your Multi-Cloud and Hybrid
Explore the latest cloud security innovations to protect multi-cloud and hybrid environments, focusing on resource protection, threat defense, and enhanced security configurations.
Grounding Zero Trust in Reality - Best Practices and Emerging Trends
Explore Zero Trust implementation best practices and emerging trends with Microsoft experts, focusing on strategies to address modern cybersecurity challenges in an expanded threat landscape.
GitOps in a Regulated Sector
Learn how to implement GitOps in regulated sectors, exploring access control, security, and infrastructure strategies while maintaining simplicity and compliance with government regulations.
Advanced Access Control with Docker EE
Explore advanced access control in Docker Enterprise Edition, covering secure resource segmentation, fine-grained roles, and policy implementation for effective multi-tenant container environments.
BeyondCorp - Beyond "Fortress" Security
BeyondCorp: A new security model that grants access based on device and user credentials, eliminating the need for traditional VPNs and enabling secure work from any network.
Introducing the ASVS 4.0
Explore OWASP ASVS 4.0 updates, new controls, and industry applications. Learn about modern web app security, architecture changes, and a novel attack technique.
Software Defined Segmentation
Explore software-defined segmentation with TrustSec to simplify security management, enable policy-based control, and address modern business security challenges.
Offensive Browser Extension Development
Learn to develop and analyze browser extensions, exploring potential security risks and malicious behaviors in web store submissions and installations.
Bheem OS - A Next-Gen Reasonably Secure OS
Explore Bheem OS, a next-gen secure operating system that isolates apps in MicroVMs, offering enhanced security, usability, and performance. Learn about its architecture, features, and advantages over traditional systems.
BeyondCorp - Empowering Employees with Security for the Cloud Era
Explore Google's "BeyondCorp" framework for cloud-era security, enabling seamless remote work without VPNs through a "Zero Trust" approach and user-centric access controls.
Future Forests - Realistic Strategies for AD Security & Red Forest Architecture
Strategies for implementing Microsoft's Red Forest architecture to mitigate Active Directory attacks, covering benefits, challenges, and practical steps for enhanced security in enterprise domains.
How to Use GitHub Actions with Security in Mind
Comprehensive guide to enhancing GitHub Actions security, covering access control, secrets management, containerization, and best practices for protecting CI/CD pipelines and workflows.
Securing Your M&A Activity with Cybersecurity Due Diligence
Learn to conduct cybersecurity due diligence for M&A activities, including program components, metrics for informed decisions, and strategies for both buy and sell sides to protect and evaluate effectively.
Protecting Privacy of BLE Device Users
Explores BLE device privacy vulnerabilities and introduces BLE-Guardian, a system protecting user privacy by controlling device discovery and access without modifying existing devices or protocols.
JEDI - Many-to-Many End-to-End Encryption and Key Delegation for IoT
Explore JEDI, a novel end-to-end encryption protocol for IoT systems, addressing security challenges in smart buildings and cities through key delegation and fine-grained access control.
Understanding and Improving Security and Privacy in Multi-User Smart Homes - A Design Exploration and In-Home User Study
Explore security and privacy challenges in multi-user smart homes, examining design principles and a prototype solution for respectful usage and user agency.
Can You Roll Your Own SIEM
Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.
How I Can Unlock Your Smart Door - Security Pitfalls in Cross-Vendor IoT Access Control
Explores security vulnerabilities in cross-vendor IoT access control, focusing on delegation chains and authorization flaws in smart home devices and cloud platforms.
Insecurity in 2017 - 0 Days Are the Least of Our Problems
Exploring the cyclical nature of cybersecurity threats, this talk emphasizes the importance of basic security practices over obsession with zero-day vulnerabilities, using recent events as examples.
Codema Attack - Controlling Your Smart Home Through Dangling Management Channels
Análisis de vulnerabilidades en dispositivos IoT populares y desarrollo de CGuard, un nuevo marco de control de acceso para proteger a los usuarios finales de amenazas en canales de gestión.
Bringing a Machete to the Amazon
Explore AWS security challenges, vulnerabilities, and solutions. Learn assessment techniques and tools to protect your cloud infrastructure and applications.