What's New in Dynatrace - Release 1.289
Explore Dynatrace v1.289 updates: breaking changes, platform enhancements, AppSec features, infrastructure improvements, and application observability advancements through live demos and detailed explanations.
What's New in Dynatrace - Release 1.278
Explore Dynatrace v1.278 updates: new documentation design, Kubernetes ownership features, enhanced OS monitoring, DQL functions, AppSec events, and security dashboards. Includes live demos and resource links.
What's New in Dynatrace - Release 1.282
Explore Dynatrace v1.282 updates: SAML migration, DQL functions, credential vault, AppSec enhancements, GC alerting, mobile app settings, and infrastructure monitoring improvements. Gain insights through hands-on demonstrations.
Dynatrace Product Updates - April 2023 (Versions 263 and 264)
Explore Dynatrace's latest features in v263 and v264, including AppSec updates, DQL commands, UI improvements, and K8s enhancements. Learn about new monitoring capabilities and product developments.
What's New in Dynatrace - Release 1.292
Explore Dynatrace v1.292 updates: Metrics on Grail GA, platform enhancements, AppSec improvements, and infrastructure changes. Gain insights into new features and their practical applications.
What's New in Dynatrace - Release 1.288
Explore Dynatrace v1.288 updates: unified services for Adobe Experience Manager and Erlang, enhanced DQL features, AppSec improvements, and new infrastructure monitoring capabilities.
Back to Basics - Application Security Practices in Smart Contract Auditing
Explore application security practices in smart contract auditing, focusing on Solidity, common vulnerabilities, security tools, and the growing market for blockchain security engineers.
Hacking and Defending APIs - Red and Blue Make Purple
Comprehensive guide to API security: attack techniques, defense strategies, and best practices for both testers and defenders. Covers BOLA, authentication, data exposure, and more.
Running FaaS with Scissors - DevSecOps and Serverless Security Testing - 2019
Explore DevSecOps and FaaS technologies to enhance secure code creation, utilizing OpenFaaS for faster, more consistent security assessments and continuous testing with quick feedback loops.
Exploiting Hardware Glitches and Side Channels in Perfect Software
Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.
Increasing Web Security with the Power of HTTP Headers
Explore how HTTP headers can enhance web security, focusing on practical implementation strategies and best practices for developers and security professionals.
Empowering the Employee - Incident Response with a Security Bot
Explore how a Slack bot engages employees in incident response, enhancing security awareness and efficiency while providing valuable insights for quick, appropriate action.
Identity Theft: Attacks on SSO Systems
Explore vulnerabilities in SAML-based SSO systems, including XML signature attacks and user directory flaws. Learn how these issues can lead to identity theft and authentication bypasses in modern organizations.
Detecting CSRF Vulnerability Reliably - Programmatic Approach
Explore a programmatic approach to reliably detect CSRF vulnerabilities in web applications, overcoming common shortcomings of existing tools and improving automated security testing.
Software Security Initiative Capabilities - Where to Begin
Explore key capabilities for starting a software security initiative, including penetration testing, code review, and secure design review. Learn benefits, drawbacks, and integration into mature security practices.
New Methods in Automated XSS Detection - Dynamic Testing Without Static Payloads
Explore innovative dynamic methods for automated XSS detection without static payloads, including techniques for Stored XSS and custom exploit generation. Learn to overcome limitations of traditional approaches.
Building Your Own Large Scale Web Security Scanning Infrastructure
Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.
Practical Tips for Running a Successful Bug Bounty Program
Practical tips for running a successful bug bounty program, including scope definition, communication strategies, and vulnerability rating. Insights from experienced professionals on managing crowdsourced security testing effectively.
Building a Modern Security Engineering Organization
Practical insights on building modern AppSec and NetSec programs, launching bug bounties, and conducting realistic attack simulations in the era of continuous deployment and DevOps.
IEEE Computer Society's Center for Secure Design - Helping Design More Secure Software
Explore common software design flaws and learn strategies to create more secure applications with insights from the IEEE Computer Society's Center for Secure Design workshop.
Security Risks of Low-Code/No-Code Applications - What Could Go Wrong?
Explores security risks of low-code/no-code platforms used by business professionals. Presents research findings, demonstrates common security issues, and introduces OWASP framework for mitigating risks in business-led development.