Project Monterey: Automating Security Testing in Cloud Deployments
Explore automated security testing for cloud deployments with Project Monterey. Learn how Netflix scales traditional tools and integrates custom solutions for continuous security in a dynamic environment.
Web Application Security - OWASP AppSecUSA 2014 Defenders Track
Explore cutting-edge web security topics including cloud security, malware analysis, and reverse engineering in this comprehensive conference track from OWASP AppSecUSA 2014.
Practical Tips for Web Application Security in the Age of Agile and DevOps
Practical tips for adapting web application security to agile and DevOps environments, focusing on lightweight controls, visibility, and measuring maturity in modern development practices.
Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API
Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.
Ad Hoc Mutable Infrastructure for Security Management - Cloud Service Security
Explore ad hoc mutable infrastructure for enhanced cloud security management, focusing on active directory identity management and automated threat mitigation techniques.
Going Bananas for Cloud Security - Auditing AWS Deployments with Security Monkey
Explore AWS security auditing with security_monkey, a tool for tracking changes, auditing configurations, and understanding interconnectivity across AWS accounts. Learn cloud security best practices and efficient monitoring techniques.
Continuous Cloud Security Automation
Distributed framework for scalable security automation in cloud environments. Easily integrates tools, minimizes false positives, and supports continuous software delivery across teams.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
PDF - Mess With The Web
Explore PDF vulnerabilities and their impact on web security in this talk by Alex Infuhr, highlighting potential risks and mitigation strategies for developers and security professionals.
Uncovering OWASP's Mobile Risks in iOS Apps - AppSec California 2015
Explore iOS app vulnerabilities through reverse engineering techniques. Learn to extract, analyze, and identify common security risks in mobile applications using real-world examples.
Bringing a Machete to the Amazon: Securing AWS Applications
Explore AWS security challenges, vulnerabilities, and new techniques for assessing and protecting cloud applications. Learn about potential pitfalls and strategies to secure your AWS infrastructure.
Ten Secrets to Secure Mobile Applications
Discover key strategies for securing mobile apps, focusing on encryption, web service design, and user privacy. Learn to threat model and address top vulnerabilities using OWASP Mobile Top Ten framework.
Wyliodrin STUDIO - An Open Source Tool for IoT Development
Open-source Chrome extension for IoT development, offering a user-friendly programming environment with advanced IDE features. Simplifies board setup, supports multiple languages, and provides tutorials for beginners.
Building a Security Test Automation Framework
Learn best practices for building a security test automation framework using Docker, Kubernetes, and Defect Dojo. Discover how to manage vulnerabilities, prevent key sprawl, and implement security tooling in CI/CD pipelines.
Serverless Security: Functions-as-a-Service (FaaS) - Challenges and Best Practices
Explore serverless security, focusing on Functions-as-a-Service (FaaS) benefits and challenges. Learn about attack surfaces, third-party libraries, secrets management, encryption, and best practices for secure serverless development.
Architecting for Security in the Cloud
Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.
Navigating the Security Landscape of a Cloud-First World
Navigating cloud security challenges: shared responsibility, data protection, and enterprise ownership in the era of rapid cloud adoption. Strategies for maintaining security in cloud migrations.
Top 10 Security Best Practices for Securing Microservices
Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.
OAuth and Mandatory Access Control: Beyond Discretionary Access Control - Lecture 4
Explores OAuth's limitations in mandatory access control, discussing industry extensions and the need for standardization beyond RBAC for comprehensive security policy enforcement.
Secure Software Development Framework: Towards an SDL for All SDLCs
Proposes a flexible Secure Software Development Framework adaptable to various development methodologies, enhancing security while maintaining efficiency and ease of adoption for developers and architects.
Fixing Mobile Application Security - OWASP Mobile Security Testing Guide
Introduction to OWASP Mobile Security Testing Guide and Mobile Application Security Verification Standard, addressing challenges in mobile app security testing and best practices for secure development.