Threat Model Every Story - Practical Continuous Threat Modeling Work for Your Team
Explore continuous threat modeling for agile teams, focusing on collaborative methodologies and the PyTM open-source tool to enhance product security throughout development.
Human Factors That Influence Secure Software Development
Explores human factors influencing secure software development, including environmental conditions, developer characteristics, and team dynamics. Discusses strategies to identify and mitigate vulnerability-prone code before issues arise.
Battle Tested Application Security
Insights on building effective Application Security programs, focusing on security culture, defensive capabilities, and organizational empowerment across different environments.
Scratching the Surface of Your CD - Continuous Delivery and Application Security Challenges
Explore strategies for integrating continuous security testing into fast-paced Continuous Delivery environments, addressing challenges and streamlining processes for modern development workflows.
Digital Disease - How Healthcare Cybersecurity Challenges Can Claim or Save Lives
Explore healthcare cybersecurity challenges and their impact on patient safety. Learn how integrating clinicians with software developers can address risks in an increasingly connected medical landscape.
Threat Modeling Toolkit
Explore threat modeling techniques for software security using a cryptocurrency ecosystem example. Learn to analyze potential attacks, actors, and countermeasures early in development.
Applied Deception Beyond the Honeypot - Moving Past 101
Explore advanced deception techniques beyond honeypots for cybersecurity, drawing insights from military and political strategies to enhance defensive capabilities against diverse adversaries.
Costs of Coding to Compliance
Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.
Breaking Fraud and Bot Detection Solutions
Demystifying browser fingerprinting and user behavior tracking in fraud detection, exploring vulnerabilities, and demonstrating proof-of-concept attacks against these defense mechanisms.
Prove It! - Confronting Security With Data
Explore data-driven methods to measure and improve security capabilities in rapidly scaling businesses, focusing on quantitative strategies and decision analysis techniques.
Secure Product Lifecycle as a Service
Learn to design, implement, and scale a Secure Product Lifecycle (SPLC) program using automation and security ambassadors. Gain insights from Adobe's successful approach to integrating security into software development.
Building a Culture of Security at The New York Times
Insights on building a culture of security at The New York Times, focusing on adapting to new challenges, fostering collaboration, and implementing practical strategies for newsroom protection.
Handling of Security Requirements in Software Development Lifecycle
Explore a unified process for handling security requirements in large companies, focusing on SecurityRAT tool for automated requirement management and issue tracking integration.
Being Powerful While Powerless - Elevating Security By Leading Without Authority
Learn strategies for elevating security without formal authority, including technical approaches and cultural tactics to influence stakeholders and drive positive change in organizational security practices.
How Do JavaScript Frameworks Impact The Security Of Applications
Explore JavaScript frameworks' impact on application security, analyzing mitigation levels, case studies, and CSRF protection across popular frameworks like Meteor.
Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities
Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.
Attacking Modern Web Technologies
Explore modern web vulnerabilities with top hacker Frans Rosén. Learn about exploiting postMessage, WebSockets, cloud misconfigurations, and more. Gain insights to enhance your web security knowledge.
From Rogue One to Rebel Alliance - Building Developers into Security Champions
Learn to transform developers into security champions, scaling your AppSec efforts. Discover recruitment strategies, training techniques, and success metrics for building a robust security program within development teams.
Bringing Rapid Prototyping to the Threat Model Process
Discover rapid threat modeling for Agile/DevOps environments, enhancing software security design tenfold through efficient risk analysis and automated workflows.
How Online Dating Made Me Better at Threat Modeling
Explore threat modeling through online dating, balancing privacy and human connection. Learn best practices for safer digital interactions and gain insights into core security principles.
Uninvited Guests - Understanding Malicious Web Bots with OWASP Handbook
Explore malicious web bots and automated threats using OWASP's Handbook. Learn about scalping, scraping, and sniping, with real-world examples and countermeasures for better online security.