SLSA: A Security Paradigm for Software Supply Chain Integrity
Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.
Proactive Supply Chain Security with GUAC
Explore GUAC, a tool for proactive software supply chain security. Learn about its features, recent release, roadmap, and how to contribute to this OpenSSF project.
Disruptors, American Challenges, and Climate Activism - Aspen Ideas Festival 2024
Innovative tech leaders, political analysts, and activists discuss AI, societal challenges, and climate action in a thought-provoking series of conversations exploring critical issues shaping our world.
Practical Steps for Securing the Entire SDLC
Practical steps for securing the entire software development lifecycle, moving beyond secure coding to embrace holistic system security throughout the development process.
Keynote - Consumer Protection in the Age of AI
Explore insights from Stephanie Nguyen of the U.S. Federal Trade Commission on critical issues at the intersection of technology, fairness, accountability, and transparency in this keynote address.
Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development.
Using Large Language Models to Improve Data Loss Prevention in Organizations
Explore how large language models enhance data loss prevention by enabling full-text analysis and document categorization, improving sensitive information detection beyond pattern-based matching.
Navigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resistant Cryptography
Explore quantum-resistant cryptography for Kubernetes security. Hands-on insights into mTLS, x.509 certs, and container signing. Learn standardization progress and empower yourself to conduct tailored experiments.
Leveraging the Linux Kernel for Building a Zero-Trust Environment Without a Service Mesh
Explore an innovative approach to zero-trust security using a Linux kernel module for mTLS and access control, avoiding service mesh complexities while maintaining strong workload identities and traffic encryption.
ShellTorch - The Next Evolution in *4Shell Executions
Uncover ShellTorch vulnerabilities in TorchServe, enabling remote code execution and AI model manipulation. Learn about the high-severity exploit's impact on PyTorch ecosystem and essential mitigation strategies.
Future Open Source LLM Kill Chains - Security Risks and Mitigation Strategies
Explore potential security risks in open-source AI ecosystems, focusing on LLM vulnerabilities and kill chains. Learn mitigation strategies to protect against sophisticated adversaries in the evolving AI landscape.
Sigstore: Past, Present and Future Directions
Explore Sigstore's journey, impact on OSS code signing, and future plans. Learn about its adoption by major projects and integration efforts with package managers.
Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors
Explore protective measures against adversarial actors infiltrating AI supply chains. Learn to secure data, models, and pipelines, implement security controls, and mitigate risks in AI systems.
Intersection of AI and Security - Traditional Sessions
Explore AI security challenges and solutions: CISO checklist, LLM security framework, and machine learning model serialization attacks. Gain insights from experts on safeguarding AI systems.
Michaelis-Menten Kinetics and Singular Perturbation Methods in Mathematical Oncology
Explore Michaelis-Menten kinetics and singular perturbation methods in mathematical oncology, enhancing understanding of enzyme-substrate interactions and complex systems.
GRC Engineering - Bringing Governance, Risk, and Compliance to Your Git Repositories
Explore innovative approaches to integrate Governance, Risk, and Compliance directly into git repositories, revolutionizing how organizations handle compliance and security challenges.
Navigating the AI Frontier: Investing in AI in the Evolving Cyber Landscape
Explore AI's impact on cybersecurity through an investor's perspective, covering automation opportunities, ethical considerations, and risk management strategies for responsible AI deployment.
Insecurity Protocols - An Overview of Modern Authentication
Explore modern authentication protocols like OpenID Connect, SAML, and WebAuthn. Learn their strengths, vulnerabilities, and real-world security implications in this comprehensive overview.
API Security By Design
Explore API security best practices and design principles to build robust, secure systems with expert insights from Jose Haro Peralta.
This and That: Language-Gesture Conditioning of Visual Generative Models for Robotics - Tech Talk #7
Explore visual generative models, language-gesture conditioning, and video-to-robot action in this tech talk on advanced machine learning for robotics, featuring research insights and future directions.
HumanPlus and MobileAloha - Humanoid Shadowing and Bimanual Mobile Manipulation - Tech Talk 6
Exploración de HumanPlus y MobileAloha: avances en robótica humanoide e imitación de movimientos humanos para manipulación bimano móvil y teleoperación de bajo costo.