Lessons in Securing Internal Apps - AppSecCali 2019
Lessons and strategies for securing internal applications, including authentication, TLS, Content Security Policy, and leveraging WAFs. Insights on scalable approaches and using internal apps to train security engineers.
Netflix's Layered Approach to Reducing Risk of Credential Compromise
Discover Netflix's multi-layered security approach to protect against credential compromise, featuring innovative tools and strategies for robust infrastructure protection.
A Seat at the Table: Effective Security Collaboration in DevOps - AppSecCali 2019
Discover effective collaboration strategies for security professionals in the DevOps era, focusing on new skills, approaches, and speed to engage early and add value in software development.
Baking Security Into the Software Development Lifecycle - CISO Panel
CISOs discuss strategies for integrating security into rapid application development, sharing real-world experiences on managing evolving methodologies and pressures to publish securely.
The Path of Secure Software Development - AppSec EU 2017
Explore proactive security controls for developers to build safer applications. Learn techniques to address common vulnerabilities and integrate security throughout the development lifecycle.
DevSecOps: Improving Security Posture Through Linguistic Theory
Exploring linguistic theory's impact on security practices, this talk examines how names and metaphors influence organizational processes and interactions to enhance security posture.
Application Security for DevSecOps - Don't Learn, Don't See, Don't Run
Explore the future of DevSecOps with insights on seamless security integration, emerging technologies, and adoption strategies for the next three years in application development.
Monitoring Attack Surface and Integrating Security into DevOps Pipelines
Explore methods for calculating and tracking web application attack surface, and learn to integrate security testing into CI/CD pipelines for effective DevOps practices.
DevSecOps Roundup - An Overview of the Current State
Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.
Dangerous Optimizations and the Loss of Causality in C and C++ Programming
Explore compiler optimizations in C/C++ that can lead to software vulnerabilities. Learn about mitigation strategies and the importance of maintaining causality in code.
Rise of the Machines: Automating Application Security Assessments - AppSec EU 2017
Explore automated security assessment techniques using Jenkins, HP Fortify, OWASP ZAP, and more. Learn how to efficiently scan and report vulnerabilities across diverse applications and platforms.
Embedded Systems Security - Common Threats and Best Practices
Explore embedded system security threats, proactive controls, and best practices to protect interconnected devices from vulnerabilities and potential DDoS attacks.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Security and the Self-Contained Unit of Software - AppSec EU 2017
Exploring security challenges in modern software development, focusing on self-contained components and shifting security features from infrastructure to application level.
Improving the Security of Software Defined Infrastructures - AppSec EU 2017
Explore security challenges in Software Defined Infrastructures, learn attack surfaces, vulnerability identification techniques, and remediation strategies for configuration management tools like Puppet or Chef.
Requirements Gathering for Successful DevSecOps Pipeline - AppSec EU 2017
Discover key requirements for implementing a security-focused automated development pipeline in your organization, addressing assessment, bottlenecks, training, metrics, and monitoring.
Integrating Security in Agile Projects - AppSec EU 2017
Practical guide on integrating comprehensive security programs into agile development, featuring a real-world case study and tips for organizations prioritizing security in their projects.
Embedding GDPR Into the Secure Development Lifecycle
Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, and breach notification processes.
Monitoring Application Attack Surface to Integrate Security into DevOps Pipelines
Explore integrating security into DevOps pipelines through application attack surface monitoring. Learn strategies from a recognized expert to enhance your organization's software security practices.
Serverless Security: Challenges and Opportunities
Explore serverless architecture's impact on security operations with Twilio experts. Learn about challenges, benefits, and best practices in this emerging paradigm.
The Road to Free Certificates is Paved with Good Intentions
Exploring the journey towards free SSL/TLS certificates, this talk discusses the challenges, intentions, and implications of widespread HTTPS adoption for web security and privacy.