Cloud Native Security - Mapping the Landscape
Explore key areas of Cloud Native security: platform security, user management, and software supply chain. Gain insights into best practices, threat mitigation, and resources for further learning.
Dynamic Policy Enforcement for Microservice Environments
Explore dynamic policy enforcement strategies for microservice architectures, focusing on security, scalability, and efficient management in complex distributed systems.
Bridging Security and Reality with Open Policy Agent
Explore Open Policy Agent's role in bridging security and real-world scenarios, enhancing policy enforcement and decision-making in modern IT environments.
AuthMatrix - Simplified Authorization Testing for Web Applications
Simplified authorization testing for web apps using AuthMatrix, a Burp Suite extension. Learn common insecurity patterns, mapping techniques, and effective testing methods for access control vulnerabilities.
OWASP Top Ten Proactive Controls for Secure Web Development
Learn essential secure coding techniques for web development, covering validation, authentication, access control, encoding, data protection, and secure architecture to build robust and protected applications.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Navigating the Security Landscape of a Cloud-First World
Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.
OAuth and Mandatory Access Control: Beyond Discretionary Access Control - Lecture 4
Explores OAuth's limitations in mandatory access control, discussing industry extensions and the need for standardization beyond RBAC for comprehensive security policy enforcement.
Automatic Detection of Inadequate Authorization Checks in Web Applications
Automatic detection of missing authorization checks in web apps using static analysis. Explores techniques, real-world applications, and provides remediation suggestions for developers.
Secure the Build, Secure the Cloud: Using OIDC Tokens in CI/CD Pipelines
Learn to enhance cloud security using OIDC tokens in CI/CD pipelines. Explore benefits, configuration, and integration with major platforms through practical demonstrations.
Can You Keep a Secret? Securely Interacting with Edge Devices in Kubernetes
Explore secure integration of edge devices in Kubernetes clusters using Akri, addressing authentication challenges and enhancing resource management for IoT and edge computing scenarios.
How to Secure Your Services with Kalix Security
Explore Kalix Security features to enhance service protection. Learn implementation strategies for robust security measures in cloud-native environments.
Enhancing Business Security and Compliance with Service Mesh
Explore how service mesh technology enhances security and compliance in cloud-native environments, improving business operations and risk management.
Modernizing Authorization in Cloud Native Environments
Explore modern authorization techniques for cloud-native applications, focusing on scalable and flexible solutions to enhance security and access control in distributed systems.
The Current State of Cloud-Native Authorization
Explore the latest developments in cloud-native authorization, examining key trends, challenges, and best practices for securing modern distributed systems.
Securing an API Ecosystem with OAuth 2.0
Explore OAuth 2.0 implementation for robust API security in this comprehensive talk by Philippe De Ryck, covering best practices and ecosystem protection strategies.
Cloud Native Application Authorization
Explore modern approaches to application authorization in cloud-native environments, focusing on security, scalability, and best practices for Kubernetes and CNCF projects.
A Guide to Securing GitHub Based on Lessons Learned
Discover strategies for securing GitHub organizations, managing repositories, and implementing best practices for code review, dependency management, and vulnerability reporting.
Dynamic and Context-Aware Security Policies for the Cloud Using Service Mesh
Explore dynamic cloud security policies using service mesh, leveraging context-aware data and AI for fine-grained authorization, NIST control enforcement, and sensitive data access management.
A Guide to Securing GitHub Based on Lessons Learned
Discover strategies for securing GitHub organizations, managing repositories, and implementing best practices for code review, dependency management, and vulnerability reporting.
Security and Correctness in Wasmtime
Explore security measures in Wasmtime WebAssembly runtime, focusing on sandboxing, isolation, and implementation correctness to ensure safe execution of untrusted programs.