Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
Defending Cloud Infrastructures with Cloud Security Suite
Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent
Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.
How I Could Have Stolen Your Photos From Google
Uncover a critical security vulnerability in Google Photos and learn how it could have compromised user privacy. Gain insights into responsible disclosure and ethical hacking practices.
Automating IMDS Protection at Scale in AWS - Metabadger Tool Overview
Automate AWS IMDS protection with Metabadger: Learn to upgrade EC2 instances to IMDSv2, prevent SSRF attacks, and secure AWS credentials across multiple accounts without downtime.
Purple Teaming with OWASP PurpleTeam - Security Regression Testing
Explore OWASP PurpleTeam, a security regression testing tool for web apps and APIs. Learn its components, setup, and workflows for early detection of application security defects in build pipelines.
Costly Mistakes in Serverless Computing
Explore common pitfalls in serverless computing and learn how to strengthen your cybersecurity posture when building cloud-based applications.
AWS Misconfiguration from an Attacker's Perspective
Explore AWS misconfigurations from an attacker's perspective with security analyst Kavisha Sheth. Learn to identify and mitigate vulnerabilities in cloud environments for enhanced cybersecurity.
Why Checking Infrastructure-as-Code for Misconfigurations Is Not Enough - Comprehensive Cloud-Native Application Security
Explore comprehensive cloud-native app security beyond misconfigurations. Learn dynamic assessment techniques for robust architecture design and compliance in modern software development.
Automated Serverless Security Testing: Delivering Secure Apps Continuously
Explore serverless security risks, traditional testing limitations, and a new automated approach for secure serverless development without scripts or delays.
Identifying Assets in the Cloud - Security Techniques
Explore techniques for identifying and securing cloud-based assets, enhancing your organization's cybersecurity posture in the modern digital landscape.
Attacking Microservice Systems: Methods and Practical Tips
Discover methods and practical tips for attacking microservice systems, exploring new security architecture patterns and vulnerabilities specific to this increasingly popular design approach.
Open Source Investments in Enterprise Technology - Keynote Panel
Panel discussion on open source investments featuring industry experts, exploring trends, challenges, and opportunities in the open-source ecosystem and its impact on cloud computing and enterprise technology.
The Home Depot's Journey into Cloud Foundry Foundation - 6 Months In
Insights from The Home Depot's journey as a Cloud Foundry Foundation member, exploring strategies, successes, and lessons learned in adopting and contributing to the platform.
Serverless State of the Union - Adoption, Use Cases, and Future Trends
Explore serverless technology's impact, adoption methods, and future potential. Gain insights into open-source projects advancing serverless ecosystems and enabling interoperability.
Welcome and Opening Remarks - Linux Foundation Keynote
Jim Zemlin's keynote address explores the latest trends in open source technology, cloud computing, and mobile innovation, offering insights on the future of the global tech industry.
Autoscaling Mesos and Marathon on AWS Spot Fleet - Maximizing Efficiency and Minimizing Costs
Explore Yelp's innovative approach to autoscaling Mesos and Marathon on AWS Spot Fleet, optimizing cluster utilization and cost-efficiency while maintaining service resilience and performance.
Building FAST Data Solutions with DC/OS on Azure
Learn to develop, deploy, and manage FAST data solutions using DC/OS on Azure. Explore stateful containers, Cassandra, Kafka, and third-party workflow management in this demo-rich session.
A Year with Apache Aurora - Lessons from Chartbeat's Migration
Insights on migrating to Apache Aurora for improved resource utilization, consistent deployments, and streamlined development workflow in a real-time web analytics platform.
Making the Future Secure with Java
Explore Oracle's progress on Java platform security and future plans. Learn about evolving threats and strategies to enhance Java's security in an increasingly sophisticated attack landscape.