Security-as-Code to Accelerate DevSecOps - A Practical Guide to Get Started
Practical guide for implementing security-as-code in DevSecOps, covering automation of security policies, common barriers, and six steps to get started with this approach.
AppSec’s Future and the Rise of the Chief Product Security Officer
Explore the evolution of application security and the emerging role of Chief Product Security Officers in addressing modern digital infrastructure challenges.
The Game of Cyber Threat Hunting - The Return of the Fun
Discover the excitement of cyber threat hunting through new approaches and a live demo, refocusing on its creative nature and eureka moments.
Android Rootkits - Analysis from Userland and Kernelland
Explore Android rootkit analysis using memory forensics, dynamic binary instrumentation, and machine learning for actionable threat intelligence in userland and kernelland.
Next-Gen IoT Botnets - Bad Implementations of Good Cloud Platforms
Explore security vulnerabilities in IoT cloud platforms, including authentication bypasses and remote code execution. Learn about the risks of poor implementations and their widespread impact on connected devices.
Artificial Intelligence Security and Privacy - Legal Threats and Opportunity
Explore AI's impact on privacy, security, and legal landscapes. Learn about potential risks, opportunities, and efforts to preserve AI integrity from industry experts.
Losing Our Reality - How Deepfakes Threaten Businesses and Global Markets
Explore the business and market threats posed by deepfakes, analyzing risks and presenting defense strategies for organizations in an AI-driven world.
Practical Use of the MUD Specification to Support Access Control in the IoT
Explore how the MUD Specification can enhance IoT device access control through proof of concept implementations, addressing lessons learned and implementation challenges.
No CISSP, No Problem - Growing the Cyber-Talent Pool
Explore innovative strategies to broaden the cybersecurity talent pool beyond traditional certifications. Industry leaders share insights on reimagining recruitment practices to address the skills gap.
A Mapping of GDPR to Common Features
Practical guide to translating GDPR privacy rights into actionable feature ideas for developers and companies, helping satisfy global privacy regulations.
Pre-Crime Detection of Active Shooters Using Predictive Policing Systems
Explore how predictive policing and AI can detect potential active shooters by analyzing warning behaviors across various data sources, enabling early intervention and prevention.
Kubernetes Practical Attack and Defense
Hands-on demonstration of Kubernetes attacks and defenses using open-source tools. Learn to identify vulnerabilities, execute attacks, and implement effective countermeasures in container-based environments.
Mobile MFA Madness - Mobile Device Hygiene and MFA Integrity Challenges
Explore vulnerabilities in mobile authenticator apps and learn how poor device hygiene compromises MFA integrity. Includes live demonstration of exploiting these weaknesses.
Understanding and Explaining Post-Quantum Crypto with Cartoons
Cartoon-based explanation of post-quantum cryptography for IT security professionals, covering methods like NTRU and Google's "New Hope" without requiring advanced math skills.
Secure Sandboxing in a Post-Spectre World
Explore WebAssembly and Lucet for secure edge computing, offering efficient multi-tenant isolation of native code with lower resource and performance costs than competing approaches.
Logging in the Cloud - From Zero to Incident Response Hero
Learn essential cloud logging practices for AWS, Azure, and GCP to enhance incident response capabilities and streamline security operations in multi-cloud environments.
Time to Tell
Explore the future of cybersecurity with McAfee's CTO as he challenges outdated practices and advocates for innovative defenses in the face of emerging technologies like quantum computing.
Speaking to Executives - Implementing Quantitative Risk in Cyber-Programs
Explore strategies for communicating cyber risk to executives using quantitative methods like FAIR. Learn to build defensible investment strategies and gain insights on workforce development and messaging.
DevSecOps State of the Union
Comprehensive overview of DevSecOps trends, best practices, and tools, distilling insights from industry experts and mature security programs for practical implementation.
Standing Up a Successful Product Security Program
Insights from industry leaders on establishing effective product security programs, covering design, awareness, and response strategies for major cyber threats.
Reality Check - The Story of Cybersecurity
Explore the human element in cybersecurity, challenging simplified views and examining the true narrative behind the industry's characters and realities.