Building Cloud-Native Security for Apps and APIs with NGINX
Enhance NGINX with robust security features for apps and APIs. Learn practical methods for visibility, real-time protection, and mitigation of OWASP Top10 threats, bots, and data leakage in cloud environments.
OWASP Juice Shop - Sustainable Development Practices for Web Applications
Explore sustainable web app development with OWASP Juice Shop. Learn clean code, TDD, CI/CD, quality metrics, and mutation testing. Discover automation benefits and overcome challenges in JavaScript development.
Android Password Manager Security Analysis - AppSec EU 2017
Explore Android password manager security, common vulnerabilities, and best practices for protecting stored secrets. Learn about implementation pitfalls and design failures in popular apps.
Fixing Mobile Application Security - The OWASP Mobile Project
Explore OWASP's Mobile Application Verification Standard and Security Testing Guide, addressing key mobile app security challenges and best practices for secure data storage, communication, and API usage.
Security in the Land of Microservices - Challenges and Solutions
Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.
Dynamic Security Group Recommendations with Grouper and Dredge
Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.
Introduction to Azure IoT
Explore Azure IoT Hub's capabilities for device communication, data processing, and business insights in IoT solutions. Learn how this adaptable service can benefit both hobbyists and enterprise developers.
Rust: Removing the Sharp Edges from Systems Programming
Explore Rust's safety features for systems programming, including memory management, type system, and error handling. Learn to integrate Rust into Yocto systems using meta-rust.
Fuego Test Framework Status and Roadmap
Explore Fuego Test Framework's status, roadmap, and comparisons with existing open-source testing tech. Learn about recent developments and contribute to shaping its future direction.
Collaborative Project Updates: ODP, CNCF, OpenSwitch and CII
Collaborative project updates on ODP, CNCF, OpenSwitch, and CII, featuring insights from industry leaders on open-source initiatives, cloud computing, and infrastructure security advancements.
Collaborative Project Updates: Hyperledger, ONF, OCI, Node.js, OPNFV, and JS Foundation
Explore updates on collaborative open-source projects in blockchain, networking, containers, JavaScript, and more. Gain insights into cutting-edge developments across various technology domains.
State of the Union - The Linux Foundation
Explore the latest trends in open source, cloud computing, and mobile technology with insights on security, sustainability, and innovation from The Linux Foundation's executive director.
Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
NOSQL Web Application Vulnerabilities and Mitigation
Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent
Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.
SUSTO: Systematic Universal Security Testing Orchestration
Explore systematic universal security testing orchestration for efficient vulnerability detection and management in software development lifecycles.
Web Application Honeypot Threat Intelligence - Techniques and Implementation
Explore web application honeypots for threat intelligence, using ModSecurity and OWASP Core Rule Set to capture attacker activity and protect software against emerging threats.
OWASP Application Gateway: Introduction and Usage for Secure Web Applications
Explore OWASP Application Gateway: a modern HTTP reverse proxy for secure web apps. Learn its benefits, implementation, and customization for enhanced application security.
Purple Teaming with OWASP PurpleTeam - Security Regression Testing
Explore OWASP PurpleTeam, a security regression testing tool for web apps and APIs. Learn its components, setup, and workflows for early detection of application security defects in build pipelines.
Software Security Engineering: Lessons from the Past to Fix the Future
Explore software security engineering strategies to eliminate known bugs and achieve 99.99% resilience against zero-day threats. Learn from past events to fix future security problems in applications.