Introduction to Open Policy Agent (OPA) for Security and Authorization
Explore Open Policy Agent (OPA), a versatile policy engine for fine-grained, context-aware enforcement across the stack. Learn its applications in microservices, Kubernetes, and API authorization.
Distributed Authorization for Microservices - Kubernetes, Istio, and Open Policy Agent
Explore advanced microservices security using Kubernetes, Istio, and Open Policy Agent for robust distributed authorization in modern cloud-native architectures.
Bridging Security and Reality with Open Policy Agent
Explore Open Policy Agent's role in bridging security and real-world scenarios, enhancing policy enforcement and decision-making in modern IT environments.
Securing the Cloud and Training Your Dragons - Trends and Tactics for Enterprise Cloud Security
Explore enterprise multi-cloud security challenges and solutions with Comcast's VP of Security. Learn strategies for "training your dragons" to secure infrastructure in complex cloud environments.
Cloud Impact on Enterprise Security - Hack the Cloud, Hack the Company
Explore how cloud services can be exploited in enterprise security breaches. Learn penetration testing methods and real-world attack scenarios to better protect your organization's critical systems and data.
Storing Secrets in the Cloud and Data Center: Strategies and Tools
Explore strategies for securely storing and managing credentials in cloud and data center environments, covering tools, technologies, and best practices for developers and operational teams.
Future Banks Live in the Cloud - Building a Usable Cloud with Uncompromising Security
Explore cloud-based security strategies for Bitcoin startups, including cloud architecture, account isolation, disaster recovery, and DevOps practices for building secure digital banking infrastructure.
Project Monterey: Automating Security Testing in Cloud Deployments
Explore automated security testing for cloud deployments with Project Monterey. Learn how Netflix scales traditional tools and integrates custom solutions for continuous security in a dynamic environment.
Web Application Security - OWASP AppSecUSA 2014 Defenders Track
Explore cutting-edge web security topics including cloud security, malware analysis, and reverse engineering in this comprehensive conference track from OWASP AppSecUSA 2014.
Ad Hoc Mutable Infrastructure for Security Management - Cloud Service Security
Explore ad hoc mutable infrastructure for enhanced cloud security management, focusing on active directory identity management and automated threat mitigation techniques.
Going Bananas for Cloud Security - Auditing AWS Deployments with Security Monkey
Explore AWS security auditing with security_monkey, a tool for tracking changes, auditing configurations, and understanding interconnectivity across AWS accounts. Learn cloud security best practices and efficient monitoring techniques.
Continuous Cloud Security Automation
Distributed framework for scalable security automation in cloud environments. Easily integrates tools, minimizes false positives, and supports continuous software delivery across teams.
Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Serverless Infections - Malware in Serverless Computing Environments
Explore security risks in serverless computing, including potential malware infections and data exfiltration. Learn about a novel RCE attack and best practices for securing serverless environments.
Serverless Security: Functions-as-a-Service (FaaS) - Challenges and Best Practices
Explore serverless security, focusing on Functions-as-a-Service (FaaS) benefits and challenges. Learn about attack surfaces, third-party libraries, secrets management, encryption, and best practices for secure serverless development.
Architecting for Security in the Cloud
Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.
Navigating the Security Landscape of a Cloud-First World
Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.
Detecting Credential Compromise in AWS
Learn how to detect compromised AWS credentials without prior IP knowledge, crucial for preventing costly data breaches and infrastructure abuse in cloud environments.
Building Cloud-Native Security for Apps and APIs with NGINX
Enhance NGINX with robust security features for apps and APIs. Learn practical methods for visibility, real-time protection, and mitigation of OWASP Top10 threats, bots, and data leakage in cloud environments.