Vulnerability and Threat Management - How Can We Close the Gaps
Explore strategies to enhance vulnerability and threat management through DevOps, Visible Ops, and improved application development, configuration, and operations processes.
Drawing the Map - Outlining Android Permissions Mechanism
Explore Android permissions mapping methodologies, their importance for security, and the need for a centralized approach led by Google to enhance mobile app development and testing.
OAuth 2.0 Deconstructed
Comprehensive deconstruction of OAuth 2.0, exploring its intricacies, implementation strategies, and best practices for secure authentication in modern web applications.
Application Security in an Agile SDLC
Explore integrating application security into Agile development, covering key concepts, tools, and real-world examples for creating secure software efficiently.
Security Pitfalls in Scriptable Infrastructure Pipelines
Explore security vulnerabilities in infrastructure pipelines, focusing on script-based systems. Learn to identify and mitigate risks in automated deployment processes.
Sure, Let Business Users Build Their Own. What Could Go Wrong?
Explore the risks and challenges of empowering business users with Low-Code/No-Code platforms, examining potential security implications and enterprise-wide impacts.
The Bug Hunter's Methodology - Application Analysis v1
Comprehensive guide to application analysis for bug hunters, covering advanced techniques, tools, and methodologies to identify vulnerabilities and maximize bounty rewards.
Developing CTFS - Writing and Hosting Intentionally Vulnerable Applications
Learn to host Capture The Flag competitions, develop secure vulnerable applications, and set up robust infrastructure for large-scale events. Gain insights into challenge creation and security considerations.
Auditing the Compression Algorithm Weapon Cache
Explore decompression bomb attacks, their impact on applications, and strategies for prevention. Learn about various compression algorithms and their vulnerabilities in this security-focused presentation.
Secret Hunting
Discover techniques for finding, rotating, and safely managing secrets in applications. Learn best practices for secure secret storage and handling compromised credentials.
Allow Myself to Encrypt Myself
Explore encryption frameworks, trust domains, and data protection mechanisms for enhanced application security in an increasingly connected world.
Improving Developers' Understanding of Regex Denial of Service Tools through Anti-Patterns and Fix Strategies
Explore anti-patterns and fix strategies to enhance understanding of Regex Denial of Service tools, improving security and performance in software development.
10 Mistakes Hackers Want You to Make
Discover common security vulnerabilities and practical measures to protect your applications from hackers in this informative talk by a Java expert.
There Is No Shortcut to Serverless - From Your Legacy System
Explore challenges and design options for migrating to serverless architecture, focusing on security, integration, and performance optimization for legacy system connectivity.
Migrating Your Spring Boot Application to Java Modules
Learn to migrate Spring Boot applications to Java Modules with a step-by-step approach, covering challenges, solutions, and practical implementation techniques for modular development.
Java Security Animated
Explore Java platform security concepts through animated visualizations, making complex topics more accessible and easier to understand for developers.
Easily Secure Your Front and Back Applications with KeyCloak
Comprehensive guide to implementing robust security across various applications using KeyCloak. Learn to secure Java EE, Node.js, Angular, and mobile apps with features like social login and Single Sign-On.
Security and Microservices
Explore strategies for securing microservices architectures, including defense in depth, technology choices, and integration techniques to protect vital data and processes while minimizing attack surfaces.
Easily Secure and Add Identity Management to Your Spring Boot Applications
Integrate Keycloak with Spring Boot for robust identity management. Live coding demo builds a secure app from scratch, showcasing microservices protection and REST service security.
Securing Microservices - A Practical Guide
Practical guide to securing microservices using Game On! as an example. Covers OAuth2, OpenID Connect, social sign-on, and dev/production parity for distributed systems.
Java EE Security API
Explore the Java EE Security API, its current state, and future directions. Gain insights into simplifying and improving security implementations in Java EE applications.