Cloud Security at Scale - Managing the Chaos
Explore the challenges and best practices for securely migrating large enterprises' legacy infrastructure to the cloud, with actionable insights for a successful transition.
Do Certain Types of Developers or Teams Write More Secure Code?
Explore factors influencing secure code development, including developer experience, team dynamics, and work environment. Learn how human and environmental elements impact software security.
Achieve AI-powered API Privacy Using Open Source
Explore AI-powered API privacy using open-source tools. Learn about Privacy-by-Design, threat modeling, and leveraging deep neural networks to protect customer data in software development.
The Battle to Address Mobile in the Endpoint Security Space
Explore mobile device security challenges, threats, and vulnerabilities in enterprise environments. Learn about the increasing importance of mobile security and strategies to protect against data breaches.
Learning the Power of the -Not My Responsibility- Mindset
Discover how shifting security responsibility to the business can improve accountability, reduce friction, and prevent burnout among security engineers while enhancing overall company security.
Securing Modern API and Microservice Based Applications by Design
Learn to secure modern API and microservices architectures with expert insights on key concerns, architectural patterns, and actionable solutions for robust application security.
The A's, B's, and Four C's of Testing Cloud-Native Applications
Explore cloud-native app testing with the A's, B's, and Four C's framework, covering threat modeling, API testing, and security management for modern software development.
Micro-services Challenges - Istio to the Rescue
Explore Istio's solutions for micro-services challenges, including traffic management, policy enforcement, and security, to enhance scalability and operational efficiency.
New Age Cloud Security - How to Build Secure Multi-Cloud Applications and Still Sleep Well
Learn to build secure multi-cloud applications with modern techniques. Explore industry trends, development phases, and essential components like TLS, DNS, user management, and data encryption for robust cloud security.
Breaking Into Red Teaming
Explore essential skills, objectives, and methodologies for successful Red Team operations, covering physical access, cloud infrastructure, and effective communication strategies.
On the Internet, Nobody Knows You're a Dog - Revisiting the Meme After 25 Years
Explore the evolution of online identity verification, from historical trends to current challenges and future opportunities, including AI and ML applications in authentication and access management.
Lost in Translation - Communicating Outside of Security
Bridging the communication gap between security professionals and developers for successful DevSecOps adoption, with insights on common language and mutual understanding.
How to Build an Effective Malware Protection Architecture for File Uploads in Modern Web Apps
Explore a novel approach to automated malware analysis for file uploads in web apps, focusing on scalability, performance, and effective detection of malicious content.
Offensive Threat Models Against the Supply Chain
Applying adversarial threat models to supply chain systems, focusing on geo-political risks and industry-specific threats to build effective threat libraries and attack sequences for improved security.
Security Testing - Is Automation Failing Us?
Explore the challenges of security testing automation and its impact on identity, privacy, and overall system protection in modern software development.
Speed with Confidence
Explore innovative approaches to security, balancing speed and confidence. Learn about shared responsibilities, data-driven decision-making, and adapting security practices to real-world challenges.
Threat Modeling for IoT Systems
Explore IoT security challenges and learn how to apply threat modeling to design and test more secure IoT systems, addressing risks in devices, web services, and client applications.
Secure Configuration in the Cloud
Explore secure configuration management in cloud environments, focusing on protecting sensitive assets, managing configuration secrets, and implementing best practices for DevOps security.
Connections - Eisenhower and the Internet
Explore the parallels between the Eisenhower Interstate System and the Internet, uncovering valuable lessons for cybersecurity and predicting the future of our digital infrastructure.
Running at Light Speed - Cloud Native Security Patterns
Explore cloud native security patterns for containerized microservices, covering multi-tenancy, authentication, authorization, and encryption. Learn architectural guidance for secure software design in cloud environments.
Building an AppSec Program from the Ground Up - An Honest Retrospective
Learn from a 2-year journey building an AppSec program, covering successes, failures, goal-setting, and execution. Gain insights on static analysis, threat modeling, metrics, and more for effective security implementation.