Building Your Code Safe: Applying DevSecOps Culture with Open Source Tools
Aprenda a usar ferramentas SAST de código aberto para análise estática, identificando vulnerabilidades em várias linguagens durante o desenvolvimento e obtendo uma visão gerencial das falhas de segurança.
DARCC - The 5 Layers of Modern App Security
Explore the DARCC layers of modern app security: Dependency, Access-Control, Runtime, Configuration, and Container. Learn best practices for securing your software supply chain and enforcing policies.
7 Must-Know Steps to Making Modern Web Apps Ultra-Secure
Learn 7 essential steps to enhance web app security. Master prevention of vulnerabilities, implement secure authorization, add security layers, logging, and testing for robust protection.
How to Start with DevSecOps on Kubernetes
Explore container security implications and strategies for Kubernetes ecosystems. Learn essential controls and best practices to secure containerized workloads in production environments.
MacGyverOps: Secure Your Development Environment with the Tools Around You
Leverage existing tools to create focused security feedback, minimizing distractions while enhancing development velocity and security in DevOps environments.
The State of DevSecOps in 2023 - Challenges and AI Solutions
Explore DevSecOps failures and AI solutions in 2023. Gain insights from Ashish Rajan's 13+ years of cybersecurity experience, focusing on cloud security and enterprise risk management at scale.
API Security Best Practices - Preventing Vulnerabilities and Hacks
Learn API security best practices, including BOLA vulnerability prevention, testing techniques, and strategies to protect against hacking through a demo-oriented session.
Application-Layer Guarantees for Data Authenticity, Integrity, and Privacy
Explore end-to-end data security in modern distributed applications. Learn to implement authenticity, integrity, and privacy guarantees across complex multi-hop routes and untrusted environments.
The North Star: Risk-Driven Security - DevSecCon
Discover risk-first threat modeling to identify and prioritize security vulnerabilities, focusing on business risks for effective risk reduction and stakeholder buy-in.
Practical DevSecOps Transformation - 5 Key Tips for Building a Successful DevSecOps Program
Discover 5 essential tips for implementing a successful DevSecOps transformation, integrating security into development and operations workflows for robust software delivery.
AI for DevSecOps Engineers - Enhancing Security Culture and Education
Explore AI technologies to enhance security testing, analysis, and education for DevSecOps engineers. Learn to automate processes, identify threats, and improve software quality in CI/CD environments.
AI's Impact on Cybersecurity - Episode 135
Explore AI's impact on cybersecurity with Sam Curry. Learn about advancements, potential threats, and appropriate responses to technological progress in the InfoSec world.
Securing Supply Chains in C++, Java and JavaScript - Episode 133
Explore supply chain security across C++, Java, and JavaScript ecosystems. Learn about challenges, dependencies, versioning, and software bill of materials (SBOMs) from industry experts.
Power of AI: DevSecOps and Cloud Artifact Signing Explored - Sessions 1 and 2
Explore AI's impact on DevSecOps and cloud artifact signing. Learn how AI enhances security automation, vulnerability scanning, and threat detection. Discover tools for ensuring trust and integrity in cloud environments.
Human vs AI: How to Ship Secure Code
Discover how AI tools like GitHub Copilot and ChatGPT can enhance secure coding practices through real-world examples, tips, and best practices for developers.
Exploring Card Games in Threat Modeling - Enhancing Security Posture
Explore innovative card games for threat modeling, including Elevation of Privileges, OWASP Cornucopia, and OWASP Cumulus. Learn how these engaging tools can enhance your organization's security posture through interactive gameplay.
Motivating Developers to Engage in DevSecOps - Hands-on Docker Security
Dive into DevSecOps with hands-on Docker activities, learning to identify and prevent vulnerabilities while strengthening your software security skills.
The Impact of Policy-as-Code on the Software Supply Chain
Explore DevSecOps principles for securing the software supply chain. Learn to automate, version, and implement controls as code for resilient software ecosystems.
A Glimpse into DevSecOps - Building a Secure NodeJS Service
Explore DevSecOps through building a NodeJS service, focusing on security integration throughout development and deployment. Learn practical insights and best practices for robust, secure software creation.
DevSecOps Unveiled: Integrating Security in the Development Lifecycle
Explore DevSecOps principles and practices for seamlessly integrating security into the development lifecycle. Learn to foster collaboration, automation, and shared responsibility for proactive vulnerability management.
Private Frequency Estimation via Projective Geometry
Explore private frequency estimation using projective geometry with insights from Jelani Nelson's conference talk at CIRM.