Build Cyber-Awareness in Platform Development Teams
Enhance platform development teams' cyber-awareness through secure coding, network segmentation, and incident response planning. Foster a security-conscious culture for robust cybersecurity practices.
Breaking the Mold: Navigating the Intersection of Technology, Security, and Trust
Explore Reeny Sondhi's journey from engineering to leading security at Twilio. Gain insights on balancing robust security with customer experience and leveraging security as a driver of trust and growth.
Think Like a Hacker - Building Secure Systems Through Ethical Hacking
Explore ethical hacking principles, common security misconceptions, and effective strategies to build robust systems through real-world stories and expert insights.
Practical Steps for Securing the Entire SDLC
Practical steps for securing the entire software development lifecycle, moving beyond secure coding to embrace holistic system security throughout the development process.
OWASP API Security Project
Explore OWASP's API Security Project, focusing on best practices, common vulnerabilities, and strategies to enhance API protection in modern applications.
Securing the Gateway and Mitigating Risks in LLM API Integration
Explore strategies for safeguarding LLM API integrations, addressing security vulnerabilities, and implementing robust risk mitigation measures in AI-powered applications.
OWASP Low-Code/No-Code Top 10 - LCNC Security Risks
Explore the top 10 security risks in low-code/no-code platforms with expert Michael Bargury, gaining insights to protect your applications and data in this rapidly evolving landscape.
OWASP Dep-scan: Analyzing Dependencies for Security Vulnerabilities
Explore OWASP Dep-scan, a powerful tool for identifying vulnerabilities in third-party dependencies, enhancing software security and streamlining the development process.
OWASP Cornucopia - Introduction to Application Security Card Game
Explore OWASP Cornucopia, a card game designed to help software developers identify security requirements in web applications, with expert insights from Johan Sydseter.
OWASP DefectDojo - Introduction and Overview
Learn about DefectDojo, an open-source application vulnerability management tool. Discover its features for streamlining security testing workflows and enhancing vulnerability tracking and remediation processes.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
Threat Modeling at Scale: More Than Shifting Left
Empower developers with scalable threat modeling techniques to enhance application security, save time and money, and make secure development more attainable.
101 Things Your Application is Doing Without Your Knowledge
Uncover hidden behaviors in your applications, including unexpected file operations and network connections, even when using trusted dependencies. Learn to identify and manage these covert activities.
CIAPO - Code Injection via Arbitrary Pointer Overwrite
Explore code injection via arbitrary pointer overwrite in this cybersecurity presentation. Learn about vulnerabilities, hacking techniques, and defensive strategies from a Bitdefender security researcher.
Step-by-Step: Application Security Architecture
Comprehensive guide to application security architecture, covering threat modeling, security controls, and best practices for robust software design and implementation.
The Magic of Application Security Posture Management and Its Future Frontier
Explore ASPM's role in fortifying application defenses, from proactive risk mitigation to predictive analytics, and its future potential with AI and blockchain integration.
DevSecOps: Dynamic Application Security Testing for Identifying Vulnerabilities
Explore security practices in DevSecOps and learn DAST testing to identify vulnerabilities in deployed applications.
Building Your Code Safe: Applying DevSecOps Culture with Open Source Tools
Aprenda a usar ferramentas SAST de código aberto para análise estática, identificando vulnerabilidades em várias linguagens durante o desenvolvimento e obtendo uma visão gerencial das falhas de segurança.
DARCC - The 5 Layers of Modern App Security
Explore the DARCC layers of modern app security: Dependency, Access-Control, Runtime, Configuration, and Container. Learn best practices for securing your software supply chain and enforcing policies.
Application-Layer Guarantees for Data Authenticity, Integrity, and Privacy
Explore end-to-end data security in modern distributed applications. Learn to implement authenticity, integrity, and privacy guarantees across complex multi-hop routes and untrusted environments.
Shifting Security Left - Episode 117
Explore shifting security left with expert Rupa Parameswaran. Learn strategies for secure by design controls, transforming security mindsets, and assessing security success in engineering teams.