Practical DevSecOps - Creating a Simple Free Pipeline - 2018
Create a free DevSecOps pipeline using IAST and RASP for real-time vulnerability detection, attack prevention, and seamless integration into existing development workflows, enhancing security across the software lifecycle.
Conducting Table Top Exercises for Cyber Incident Response Preparedness
Learn to conduct effective security table top exercises, using free resources to improve incident response preparedness and validate plans. Gain practical insights for enhancing team readiness against cyber threats.
The DevSecOps Builder's Guide to the CI/CD Pipeline
Comprehensive guide to integrating security into DevOps practices, focusing on CI/CD pipeline implementation for enhanced software delivery and protection.
Bridging GDPR from Application to Cloud - 2018
Explore GDPR's impact on cloud services, DevOps, and SRE processes. Learn best practices for designing applications with built-in data protection to achieve GDPR compliance.
When Malware Changed Its Mind - How Split Personalities Affect Malware Analysis and Detection
Explore the impact of malware behavior variability on analysis and detection techniques, based on a large-scale study of 5.6 million hosts worldwide.
AI for Cybersecurity - Overview of the Field and Promising Future Directions
Explore AI applications in cybersecurity, including threat intelligence and adversarial machine learning. Learn about data sources, limitations, and future directions in this field.
Securing Creative Content in the Digital Media Industry
Exploring modern security challenges in media, balancing content protection with user experience in a cloud-first era. Discusses innovative approaches to safeguard digital assets while fostering creativity.
StreamAlert: A Serverless Real-time Intrusion Detection Engine
Discover StreamAlert: a serverless, real-time intrusion detection engine that scales effortlessly, allowing security teams to focus on catching attackers with simple and complex rules for any log type.
LLC Cache Attacks: Applicability and Countermeasures
Exploring Last Level Cache attacks, their applicability across various scenarios, and potential countermeasures to enhance system security and protect user privacy.
Protecting Journalists: Designing Secure Systems for All Users
Explore how focusing on journalists' needs in security tool development can improve privacy and protection for all users, bypassing common objections and addressing real technical challenges.
Understanding and Securing DoD Weapon Systems
Exploring automated cybersecurity tools for DoD weapon systems, including vulnerability discovery and patching, to enhance survivability and efficiency in defense technology.
How WhatsApp Reduced Spam While Launching End-to-End Encryption
Explore WhatsApp's innovative approach to reducing spam while implementing end-to-end encryption, featuring effective techniques and challenges faced in protecting user privacy and communication.
As We May Code: Augmenting Software Security with Automated Reasoning
Exploring how cloud services and automated reasoning revolutionize software security, from development to bug detection, with examples from Microsoft's "Project Springfield" and future implications.
Ghost in the Machine: Challenges in Embedded Binary Security - Enigma 2017
Explores challenges in embedded binary security, highlighting the lag behind general-purpose systems and difficulties in adopting modern exploit mitigations due to constraints in embedded environments.
Optimization-in-the-Loop AI for Energy and Climate - IPAM at UCLA
Optimization-in-loop AI framework for climate action: enhancing ML models with physics, constraints, and decision-making processes for energy grids, building efficiency, and more.
Dispersion Modeling for Pollution Plumes and Concentration
Explore pollution plume modeling, diffusion, advection, and concentration calculations. Learn about dispersion equations, empirical values, and contour plots for environmental analysis.
Not Your Grandfather's Electricity - Physics and Future of Electrical Systems
Explore the evolution of electricity, from historical debates to modern smart grids, covering physics, circuits, renewable energy, and future technologies in this engaging seminar.
Climbing the PacketFence: Implementing Open Source NAC in a Corporate Environment
Explore the challenges and successes of implementing PacketFence, an open-source NAC solution, in a corporate environment. Learn about 802.1x authentication, multi-office deployment, and overcoming infrastructure hurdles.
How to Put Security in DevOps - 2017
Integrating security into DevOps: overcoming obstacles, enabling automation, and reaping benefits. Learn strategies for seamless AppSec implementation in continuous delivery environments.
Making Vulnerability Management Easier with DefectDojo - 2016 OWASP Project
Streamline vulnerability management with DefectDojo: automate reporting, metrics, and self-service tools for efficient security practices in large enterprises.
Trusted Execution: A Deterministic Approach to AppSec for Zero-Day Threat Prevention - 2016
Explore Trusted Execution, a novel approach to application security that promises zero-day threat prevention through granular memory-level visibility and context, eliminating false positives in advanced security threats.