Red Team Tales: 7 Years of Physical Penetration Testing
Explore real-world physical penetration testing experiences across diverse facilities, from banks to cheese factories. Gain insights into security vulnerabilities and unconventional tactics used in red team operations.
Security After Death - Password Management and Secure Sharing
Explore practical solutions for secure password storage and sharing, including commercial and open-source options. Learn how to manage passwords effectively and plan for unexpected scenarios.
The Path of Secure Software Development - AppSec EU 2017
Explore proactive security controls for developers to build safer applications. Learn techniques to address common vulnerabilities and integrate security throughout the development lifecycle.
Reducing Permissions Management Time While Protecting Users
Learn strategies to streamline permissions management, enhance user protection, and optimize security processes in application development.
Top Ten Proactive Controls for Secure Software Development
Explore essential software security controls for developers, covering authentication, access control, validation, and more. Learn proactive strategies to build robust, secure applications.
The API Assessment Primer
Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.
Implementing a User-Centric Datastore with Privacy-Aware Access Control for Cloud-Based Data Platforms
Explore user-centric data storage with privacy-aware access control for cloud platforms. Learn about implementation, components, and challenges in this informative talk on secure data management.
Building a Modern Security Engineering Organization
Practical insights on building modern AppSec and NetSec programs, launching bug bounties, and conducting realistic attack simulations in the era of continuous deployment and DevOps.
Security and Modern Software Deployment - AppSec EU 2015
Explore modern software deployment security challenges, including trust issues, dependencies, and repository vulnerabilities. Learn strategies to mitigate risks and enhance deployment security.
AppSec at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time vulnerability detection, enhanced architecture, and proactive collaboration across entire IT portfolios.
Application Security at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time visibility across an organization's portfolio, enabling proactive collaboration and value generation.
Take Control of Identity - Flexible Solutions for Developers
Explore flexible identity solutions for developers, addressing common pain points and offering adaptable options for users and companies across diverse scenarios.
The Cedar Language and Policy-Based Authorization - Episode 1
Explore policy-based authorization with AWS scientist Emina Torlak, discussing Cedar language, access control, and separating authorization logic from application code for improved security and management.
Reducing Exploitation Risk via Application-Specific Hardening in IoT Systems
Reduce exploitation risk in IoT systems through application-specific hardening techniques. Learn preventive measures, Linux security features, and hands-on examples for enhancing system security.
A Practical Approach to Control Unauthorized Execution of Interpreters
Explore practical strategies to prevent unauthorized interpreter execution, enhancing system security and mitigating potential vulnerabilities in software environments.
Throw Away Your Passwords - Trusting Workload Identity
Explore modern workload identity solutions for enhanced security, eliminating password vulnerabilities in cloud-native environments.
HashiCorp's Multicloud Zero Trust Platform
Explore HashiCorp's innovative platform for implementing zero trust security across multicloud environments, enhancing data protection and access control.
Why Machines Deserve Rights - Rethinking Automated Infrastructure Access with OSS Teleport Machine ID
Explore identity-based access control for machines in modern infrastructure. Learn about Teleport Machine ID for secure, auditable, and efficient automated access to cloud resources.
Project Calico Network Policies
Explore Project Calico's network policies for Kubernetes, enhancing security and control in cloud-native environments.
Data Security and Storage Hardening in Rook and Ceph
Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.
Identity Based Segmentation for Zero Trust Architecture
Explore Zero Trust Architecture implementation using identity-based segmentation, focusing on cloud-to-premises communication through DMZs with identity-aware proxies and service mesh.