Chromebooks and Network Motes: Enforcing Security Posture from Device to Cloud
Explore innovative security strategies using Chromebooks and network motes, balancing developer productivity with robust data protection in resource-constrained environments.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Security and the Self-Contained Unit of Software - AppSec EU 2017
Exploring security challenges in modern software development, focusing on self-contained components and shifting security features from infrastructure to application level.
AppSec Pipelines and Event-based Security - Moving Beyond Traditional Security Testing
Explore event-based security and AppSec pipelines to enhance traditional security testing methods. Learn innovative approaches for improving application security from an experienced professional.
Serverless Security: Challenges and Opportunities
Explore serverless architecture's impact on security operations with Twilio experts. Learn about challenges, benefits, and best practices in this emerging paradigm.
The Evolving Community of Application Security
Explore the evolution of Application Security, its growing importance, and the role of the community in addressing future security challenges at scale.
An Attacker's View of Serverless and GraphQL Apps
Explore attack vectors and security vulnerabilities in serverless and GraphQL applications from a red-team perspective. Learn practical exploitation techniques and defense strategies for modern distributed systems.
Practical Threat Modeling for Real-World and Cloud Situations in Hybrid Work Environments
Practical guide to threat modeling for cloud and hybrid work environments, covering creation, identification, addressing, and validation of threats with real-world examples and tools.
Leave It to the Machines - AI and ML in Container Security
Explore how AI and ML empower security teams to proactively secure container-based applications, shifting left security capabilities and streamlining the development process.
Understanding the API Attack Vector - How Attackers Exploit Application Communications
Explore attacker techniques for targeting API-driven applications, including code manipulation, mobile vulnerabilities, and advanced attacks. Learn strategies to secure apps in cloud-native environments.
OWASP Serverless Top 10 - Security Risks and Protections
Explore serverless security risks, challenges, and protective measures. Learn about OWASP Serverless Top 10 and DVSA tool for understanding serverless security implications and processes.
Secure Coding Lessons for Mobile Apps - Insights from the Trenches
Explore common mobile app coding pitfalls, their real-world impacts, and learn effective strategies to enhance security. Includes demonstrations of attacker techniques and protective code samples.
Privacy Threat Modeling - Analysis of Cloud Services Against Privacy Regulations
Learn to analyze cloud services for privacy threats and regulatory compliance using threat modeling techniques, enhancing your ability to protect sensitive data.
OWASP Serverless Top 10 - Understanding Security Risks in Serverless Applications
Explore the top 10 security risks in serverless architectures, understanding vulnerabilities and best practices for securing cloud-native applications.
Preventing Subdomain Takeover with OWASP Domain Protect
Learn to prevent subdomain takeovers using OWASP Domain Protect. Enhance your application security knowledge with practical strategies and tools.
OWASP Coraza: The Way to WAF in 2023
Explore OWASP Coraza, a cutting-edge Web Application Firewall (WAF) solution, and learn how it enhances web security in 2023 through advanced features and implementation strategies.
Big Data Intelligence - Harnessing Petabytes of WAF Statistics for Web Protection
Explore big data analysis of web application security trends, focusing on WAF statistics, attack patterns, and OWASP ModSecurity Core Rule Set accuracy. Learn to navigate and improve cloud-based web protection.
Telecom User Group and Cloud Native Network Functions Testbed - Introduction and Deep Dive
Explore the evolution of telecom network functions to cloud-native, discussing challenges, architecture, and performance testing in Kubernetes environments.
The Next Generation of Cybersecurity Threats
Explore emerging cybersecurity threats with NSA Director Rob Joyce, covering VPN vulnerabilities, nation-state actors, ransomware, and quantum-resistant encryption in this insightful discussion.
Mini-card-sized Computer Boards for Business Applications
Explore mini-card-sized computer boards for enterprise use, examining cost-effectiveness, durability, and practical applications. Learn about opportunities, management strategies, and overcoming challenges in business implementations.
Cilium - Network and Application Security with BPF and XDP
Deep dive into BPF technology for application and network security, exploring Cilium's use in distributed systems with Docker for simplified operations and troubleshooting.