Continuous Cloud Security Automation
Distributed framework for scalable security automation in cloud environments. Easily integrates tools, minimizes false positives, and supports continuous software delivery across teams.
Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Serverless Infections - Malware in Serverless Computing Environments
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Serverless Security: Functions-as-a-Service (FaaS) - Challenges and Best Practices
Explore serverless security, focusing on Functions-as-a-Service (FaaS) benefits and challenges. Learn about attack surfaces, third-party libraries, secrets management, encryption, and best practices for secure serverless development.
Architecting for Security in the Cloud
Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.
Navigating the Security Landscape of a Cloud-First World
Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.
Top 10 Security Best Practices for Securing Microservices
Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.
Serverless Security and Functions-as-a-Service (FaaS)
Explore serverless security and Functions-as-a-Service (FaaS) with expert insights on potential risks, best practices, and implementation strategies for robust cloud-native applications.
Detecting Credential Compromise in AWS
Learn how to detect compromised AWS credentials without prior IP knowledge, crucial for preventing costly data breaches and infrastructure abuse in cloud environments.
Building Cloud-Native Security for Apps and APIs with NGINX
Enhance NGINX with robust security features for apps and APIs. Learn practical methods for visibility, real-time protection, and mitigation of OWASP Top10 threats, bots, and data leakage in cloud environments.
Security Best Practices in Azure Cloud
Hands-on overview of implementing security in Azure deployments, covering best practices for various services and secure .NET application deployment.
Security in the Land of Microservices - Challenges and Solutions
Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.
Dynamic Security Group Recommendations with Grouper and Dredge
Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.
iGoat: A Self-Learning Tool for iOS App Security Testing
Learn iOS app security through hands-on exercises with iGoat, an open-source tool for developers and pentesters. Explore vulnerabilities, exploit techniques, and implement fixes in a safe environment.
AWS Survival Guide - Application Security Essentials
Discover essential strategies for securing applications in AWS environments, covering key concepts and best practices for cloud security from an experienced CTO and application security expert.
Introduction to Azure IoT
Explore Azure IoT Hub's capabilities for device communication, data processing, and business insights in IoT solutions. Learn how this adaptable service can benefit both hobbyists and enterprise developers.
Collaborative Project Updates: ODP, CNCF, OpenSwitch and CII
Collaborative project updates on ODP, CNCF, OpenSwitch, and CII, featuring insights from industry leaders on open-source initiatives, cloud computing, and infrastructure security advancements.
State of the Union - The Linux Foundation
Explore the latest trends in open source, cloud computing, and mobile technology with insights on security, sustainability, and innovation from The Linux Foundation's executive director.
Attacking AWS: The Full Cyber Kill Chain
Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.