Leaky Processors - Stealing Your Secrets With Foreshadow
Explore the Foreshadow vulnerability in modern processors and its implications for data security. Learn about potential exploits and mitigation strategies.
Lessons in Securing Internal Apps - AppSecCali 2019
Lessons and strategies for securing internal applications, including authentication, TLS, Content Security Policy, and leveraging WAFs. Insights on scalable approaches and using internal apps to train security engineers.
Looking Back to Look Ahead: Lessons for Securing Future Code and Systems
Explore the evolution of computing and its impact on security, drawing lessons from the past to safeguard future systems and code in our increasingly connected world.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Security Selfie: Sizing Up Your AppSec Program with New Metrics
Discover innovative metrics to evaluate and enhance your application security program's effectiveness, presented by Facebook's Security Engineering Manager.
Scaling Security in Leading Companies - DevOps and CI/CD Best Practices
Discover pro-tips and actionable lessons from mature security teams on scaling security in modern software development. Learn effective strategies for buy-in, engineering projects, analysis integration, and production monitoring.
Preventing DMA Attacks from Thunderbolt Devices
Explore security vulnerabilities in Thunderbolt connections and learn effective strategies to prevent DMA attacks from malicious peripherals on Linux systems.
Building Your Own Large Scale Web Security Scanning Infrastructure
Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.
An SDLC for the DevSecOps Era
Explore an SDLC tailored for the DevSecOps era with insights on integrating security into modern development practices and organizational culture.
Building a Modern Security Engineering Organization
Practical insights on building modern AppSec and NetSec programs, launching bug bounties, and conducting realistic attack simulations in the era of continuous deployment and DevOps.
OWASP HIVE Project - Welcome to the Grid
Explore OWASP HIVE, an innovative learning platform using small PCs. Learn about file systems, storage, grid stats, security, and more in this informative webinar on cybersecurity infrastructure.
Thinking Differently About Security - What Could Possibly Go Wrong?
Explore innovative security perspectives, blending technical expertise with insights from economics and military history to effectively communicate and address cybersecurity challenges.
Use After Free Exploitation - Detecting and Exploiting Heap Vulnerabilities
Explore Use After Free vulnerabilities, their detection, and exploitation in web browsers. Learn about memory leaks and ASLR bypass techniques from an industry expert.
11,000 Voices - Experts Shed Light on 4-Year Open Source and AppSec Survey
Experts discuss findings from a 4-year study on open source security practices, revealing surprising trends in policy enforcement, vulnerability tracking, and organizational preparedness for security threats like Heartbleed.
AppSecUSA 2014 - Breakers Track Sessions
Explore cutting-edge web and mobile security topics, including mobile attacks, use-after-free exploitation, static analysis, runtime manipulation, and top hacking techniques from AppSecUSA 2014.
Privacy and Security Risks in the Internet of Things
Security researcher Ken Westin explores privacy risks in the Internet of Things, demonstrating how seemingly innocuous data can be exploited by criminals and how businesses can protect their customers' information.
Exploring I/O Support for Virtualization-Based Trusted Execution Environments
Explore I/O support options for Trusted Execution Environment VMs, discussing software, hardware, and device requirements for secure data processing in confidential computing workloads.
Supporting TEE on x86 Client Platforms with pKVM
Explore x86 pKVM implementation for isolated TEE VMs, covering design, requirements, and integration with host OS. Learn about architecture, performance, and future developments.
Shhh - Stop Sharing Secrets: A Secure Mindset for Embedded Development
Explore secure embedded development practices, focusing on encryption, authentication, and trusted execution environments to protect IoT devices and data.
How to Effectively Test Transient Execution Mitigations
Explore transient execution vulnerability testing methods, challenges, and future improvements for effective mitigation in software and hardware systems.
Hardware Protections Against ROP Attacks
Explore hardware-based defenses against Return-Oriented Programming (ROP) attacks with IBM expert Mike Rapoport, focusing on cutting-edge security measures for system protection.