Risk Management for Teams That Get Things Done
Explore effective risk management strategies for growing organizations, focusing on peer review, communication, and automation to maintain high uptime standards without sacrificing velocity.
A DevOps View of AppSec
Explore DevOps history and its impact on AppSec, charting a path for DevSecOps success through standardization, automation, and Agile principles.
Cloud Security at Scale - Managing the Chaos
Explore the challenges and best practices for securely migrating large enterprises' legacy infrastructure to the cloud, with actionable insights for a successful transition.
Do Certain Types of Developers or Teams Write More Secure Code?
Explore factors influencing secure code development, including developer experience, team dynamics, and work environment. Learn how human and environmental elements impact software security.
Learning the Power of the -Not My Responsibility- Mindset
Discover how shifting security responsibility to the business can improve accountability, reduce friction, and prevent burnout among security engineers while enhancing overall company security.
Offensive Threat Models Against the Supply Chain
Applying adversarial threat models to supply chain systems, focusing on geo-political risks and industry-specific threats to build effective threat libraries and attack sequences for improved security.
Abusing Normality - Data Exfiltration in Plain Site
Explore stealthy data exfiltration techniques using everyday system objects and processes. Learn to identify and defend against sophisticated attacks that leverage normal-looking channels for malicious purposes.
How to Create and Cultivate Community within the Cybersecurity Industry
Explore strategies for fostering community in cybersecurity, focusing on gender diversity, professional development, and leadership. Learn to create inclusive environments and drive positive change in the industry.
It Was Broken When It Got Here - Security in Your Software Procurement Process
Explore strategies for ensuring security in third-party software procurement, including case studies of vulnerabilities and guidance for integrating security considerations into the purchasing process.
Information Security Risk Assessment - Lessons from the Front Lines
Practical insights on conducting Information Security Risk Assessments for software products, covering methods, tips, and lessons learned to identify and mitigate potential security risks.
Cloud Ops MasterClass - Lessons Learned from Cloud Automation
Explore cloud operations at scale, multi-account models, and automated guardrails for security and compliance. Learn to leverage automation tools for efficient cloud management and collaboration.
Implementing a Large Scale Identity Theft Prevention Solution Using the Cloud
Explore a distributed platform on AWS for preventing identity theft, session hijacking, and MitM attacks. Learn about polyglot architecture, custom caching, and strategies for improved resiliency and business continuity.
Keynote - Historical Lessons for Improving Cyber Security
Historical lessons for improving cybersecurity: outsiders' role in cryptography advances, attention to seemingly foolish ideas, and applying risk analysis from nuclear deterrence to cryptography.
No More Monkey Business - Quality Assurance in Penetration Testing
Explore quality assurance in penetration testing, addressing declining standards and providing guidance for improving security assessment practices and maintaining excellence in the field.
We Are the Cavalry - Why It Has to Be Us and Why Now
Exploring cybersecurity challenges in the Internet of Things era, emphasizing the need for proactive measures and collective responsibility to address emerging risks and protect human safety.
From Gates to Guardrails - Alternate Approaches to Product Security
Exploring Netflix's innovative approach to product security, emphasizing automation, DevOps culture, and continuous assessment for agile development in cloud environments.
Fast Adversaries - Fast Countermeasures
Fast-paced hacking techniques and countermeasures: Learn about adversaries' evolving tools, tactics, and how to protect assets effectively. Explore rapid detection, patching, and risk management strategies.
Authz is the New Authn - Trust Elevation with UMA and OpenID Connect
Explore standards-based trust elevation in online identity using UMA and OpenID Connect for enhanced fraud mitigation and centralized authentication policies in web access management.
Designing Flexibility in Software to Increase Security
Explore designing flexible software architecture to enhance security, adapt to changes, and prevent vulnerabilities. Learn from real-world examples and gain practical tips for writing better, more adaptable code.
Cyber Insurance - A Primer for Infosec
Explore cyber insurance: market growth, policy coverage, underwriting challenges, and its relevance to information security professionals. Gain insights into this evolving field and its impact on risk management.
Contact Center Authentication
Explore best practices for authenticating customers over the phone in contact centers, including research findings, common pitfalls, and innovative solutions for improved security and user experience.