Prove It! - Confronting Security With Data
Explore data-driven methods to measure and improve security capabilities in rapidly scaling businesses, focusing on quantitative strategies and decision analysis techniques.
Building a Secure DevOps Pipeline
Learn strategies to integrate security into DevOps, automate testing, and scale AppSec programs. Discover real-world examples of successful implementation across various companies, improving software development speed and security.
Practical Dynamic Application Security Testing within an Enterprise
Practical implementation of dynamic application security testing in enterprise DevOps, showcasing CI/CD pipeline integration and large-scale scanning methods for enhanced security coverage.
Moving Fast and Securing Things
Discover how Slack balances rapid development with robust security through an innovative Secure Development Lifecycle process, featuring self-service tools and chat-based workflows that foster a security mindset among developers.
Secure Product Lifecycle as a Service
Learn to design, implement, and scale a Secure Product Lifecycle (SPLC) program using automation and security ambassadors. Gain insights from Adobe's successful approach to integrating security into software development.
How to Stop Worrying About Application Container Security
Learn how to embrace container security for sensitive workloads, exploring challenges, benefits, and best practices. Gain insights from a real-world journey of adopting containers in production environments.
Building a Culture of Security at The New York Times
Insights on building a culture of security at The New York Times, focusing on adapting to new challenges, fostering collaboration, and implementing practical strategies for newsroom protection.
Attribute Based Access Control - Why, What, How
Explore digital identity trends, ABAC implementation, and data protection in finance. Learn from ABNAMRO's experience with Attribute Based Access Control and its impact on security and regulation compliance.
A Series of Unfortunate Events - Where Malware Meets Murphy
Exploring a real-world ransomware incident, its challenges, and unexpected failures in security infrastructure and recovery processes. Learn valuable lessons for better incident preparedness.
Common REST API Security Pitfalls
Explore common REST API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for robust, future-proof applications.
Don't Trust the DOM - Bypassing XSS Mitigations via Script Gadgets
Explores novel XSS attack technique using script gadgets to bypass mitigations, demonstrating vulnerabilities in modern JavaScript libraries and advocating for preventive security measures.
Test Driven Security in the DevOps Pipeline
Learn to implement Test Driven Security in DevOps, focusing on baseline controls, continuous testing, and preventing common vulnerabilities through specific, actionable security practices.
Core Rule Set for the Masses
Insights on fine-tuning ModSecurity Core Rule Set for large-scale deployments, reducing false positives, and optimizing web application firewall performance.
This Old App - A Guide to Renovating Apps for the Cloud
Explore strategies for migrating legacy applications to the cloud, considering various approaches, security implications, and organizational capabilities needed for successful cloud transitions.
Beyond Takeover - Attacker's In. Now What?
Explore the aftermath of phishing attacks through a unique research perspective, uncovering attacker behaviors, account takeover dynamics, and essential cybersecurity insights for organizations.
Handling of Security Requirements in Software Development Lifecycle
Explore a unified process for handling security requirements in large companies, focusing on SecurityRAT tool for automated requirement management and issue tracking integration.
When Molehill Vulnerabilities Become Mountainous Exploits
Explore how seemingly minor vulnerabilities can escalate into major security threats through live demonstrations, emphasizing the importance of comprehensive code scanning and proactive security measures.
An Overview of API Underprotection
Explores API security challenges, threats, and emerging technologies. Covers OAuth2, API keys, mobile app security, TLS pinning, and advanced techniques like app hardening and software attestation.
How to Find and Prevent Entire Classes of Security Vulnerabilities
Learn techniques to identify and prevent security vulnerabilities through variant analysis, code navigation, and automation, using real-world examples and practical strategies.
Being Powerful While Powerless - Elevating Security By Leading Without Authority
Learn strategies for elevating security without formal authority, including technical approaches and cultural tactics to influence stakeholders and drive positive change in organizational security practices.
The Security We Need - Designing Usable IoT Security
Explore usable IoT security design principles to create user-friendly, effective protection. Learn strategies for clear communication, secure defaults, and seamless integration of security measures.