Writing Secure Code in Python
Learn to identify and prevent security vulnerabilities in Python, including issues with eval(), pickle, and pip. Discover cryptographically-secure randomness and code auditing techniques for maintaining application security.
AST Meta-programming
Explore AST meta-programming in Swift for code injection and aspect-oriented programming. Learn practical examples and automation techniques with SauceKit.
Building a User-Centric Security Model in iOS Applications
Explore user-centric security models for iOS apps, focusing on thin transparent security layers and their application in client-server systems. Learn about ATS changes and crypto key protection.
How to Hack an Angular App
Discover vulnerabilities in Angular applications and learn effective security measures to protect against common hacking techniques and exploits.
There's Safety in Angular
Explore Angular's built-in security features protecting against common web vulnerabilities, including access control and injection exploits, ensuring safer web development and reduced breach risks.
Help! My Cluster Is On The Internet - Container Security Fundamentals
Explore container and Kubernetes security fundamentals, covering supply chain and runtime security. Learn practical strategies to protect clusters and prevent vulnerabilities using real-world examples and essential tools.
Seccomp Security Profiles and You - A Practical Guide
Explore tools for creating seccomp security profiles and understanding Linux Capabilities to harden applications. Learn about Dockersl.im and Inspektor Gadget for improved visibility into pod behavior.
How This Innocent Image Had a Party in My Cluster
Explore sophisticated techniques used by malicious actors to evade container image scanning, and learn practical advice for detecting and mitigating these advanced attacks in Kubernetes clusters.
Deep Dive Into Building a Secure & Multi-tenant SaaS Solution with NATS
Explore building secure, multi-tenant SaaS solutions using NATS messaging. Learn to create globally available applications with Pub/Sub, focusing on a minimal chat app implementation in Go.
Pod Security as an Afterthought
Explore tools for implementing Kubernetes security measures retrospectively, including kube-psp-advisor, Inspektor Gadget, and oci-seccomp-bpf-hook, to enhance pod security in existing deployments.
Dynamic Image Scanning Through System Tracing
Explore dynamic scanning for detecting sophisticated malware through system tracing. Learn about behavioral patterns, open-source tools, and comparisons with static scanning and runtime security.
Detecting Security Policies Violation Using Falco - A Practical Introduction
Practical introduction to Falco for detecting security policy violations. Learn to create custom rules for runtime security in cloud-native environments. Hands-on demo included.
Introduction to SPIFFE
Explore SPIFFE and SPIRE through live demos, learning how to leverage these tools in your applications for enhanced security and identity management.
Everything You Should Be Doing, But Aren’t - DevSecOps for K8s Workflows
Comprehensive guide to implementing DevSecOps in Kubernetes workflows, covering application security, threat detection, and governance as code with live demonstrations using CNCF projects.
Modern Service Networking With Consul Connect, Envoy and Kubernetes
Explore modern service networking using Consul Connect, Envoy, and Kubernetes. Learn about service mesh benefits, secure communication, and configuring Connect and Envoy for enhanced application security.
From Containerized Application to Secure and Scaling With Kubernetes
Learn to secure and scale containerized applications with Kubernetes, covering authentication, authorization, MTLS, certificate management, CICD, availability, and scalability for production-ready code.
Why Digital Transformation Should Also Include Modernizing Your AppSec
Explore the importance of modernizing application security in digital transformation, covering challenges, trends, tools, and strategies for effective AppSec adoption and implementation.
Security with Scala Refined Types and Object Capabilities
Explore advanced security techniques using Scala's refined types and object capabilities for robust, type-safe application development.
Spacecraft! The Care and Keeping of a Legacy Application
Allegorical journey through strategies for assessing, improving, and maintaining legacy Rails applications, using a spacecraft metaphor to explain complex concepts in simple terms.
Gem Install - What Could Go Wrong?
Explore the risks of installing gems in Ruby applications and learn preventive measures against potential attacks in your dependencies.
Using Rails Engines to Supercharge Your Team
Explore Rails engines as powerful tools for modular development, focusing on their role in implementing GraphQL Federation at Doximity and enhancing team productivity.