OWASP Flagship Projects - OWASP Security Knowledge Framework
Explore the OWASP Security Knowledge Framework, its features, and security lifecycle. Learn about OSS projects, demo labs, and expert wizards for enhancing application security.
OWASP Flagship Projects - OWASP ModSecurity Core Rule Set
Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.
OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation
Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.
OWASP Standard Classification - Rough Consensus - An OWASP Story
Explore OWASP's journey in establishing software security standards through rough consensus, highlighting challenges, achievements, and future directions in the field.
OWASP Standard Classification - Achieving Security by Shifting Left in Agile
Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.
Topics of Interest - Agile Threat Modeling with Open-Source Tools
Explore agile threat modeling using open-source tools to capture project risk landscapes efficiently. Learn about Threagile, a developer-friendly toolkit for continuous threat modeling in DevSecOps environments.
Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack
Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.
Using Binary Search Algorithms for Blind SQL Injection
Explore efficient blind SQL injection techniques using binary search algorithms, enhancing penetration testing skills and applying programming knowledge to real-world security challenges.
All Your Ether Belong to Us - Hacking Ethereum-Based DApps
Explore Ethereum-based DApp vulnerabilities, attack methods, and protection strategies. Learn about blockchain technology, smart contracts, and the security challenges in decentralized applications.
Temporal - The Future Is Simple - Introducing the CRE
Introducing the Common Requirement Enumeration (CRE) initiative: a unified framework linking security standards to simplify and integrate application security across domains and stakeholders.
Topics of Interest - React Native Security - Addressing Typical Mistakes
Explore React Native security, common pitfalls, and best practices. Learn to address risks, manage permissions, detect jailbreaks, and implement secure storage in mobile app development.
Topics of Interest - Automatic Vulnerability Remediation - The Trusted and Secure Road to Developer Happiness
Explore automatic vulnerability remediation's potential to expedite product releases, free up development resources, and enhance software security while addressing developer trust concerns.
Topics of Interest - Top 10 Challenges for DevSecOps
Explore the top 10 challenges in implementing DevSecOps, focusing on integrating security into DevOps processes for precise, usable data and reduced business risk.
Temporal - Bot or Human? Detecting Malicious Bots with Machine Learning in 2021
Explore advanced techniques for detecting sophisticated bots using machine learning, combining server-side and client-side signals, and leveraging supervised and unsupervised approaches for maximum accuracy.
Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips
Explore methods and practical tips for attacking microservice systems, focusing on security assessment approaches to identify vulnerabilities specific to this architecture.
Topics of Interest - An Attacker's View on APAC's 2021 Three Major Breaches
Explore an attacker's perspective on APAC's major 2021 breaches, analyzing causes and prevention strategies for enhanced cybersecurity awareness.
Rising Above the Gathering Storm - Open Science and Intellectual Property
Explore open science, intellectual property, and global innovation challenges with Nobel laureate Steven Chu. Gain insights on balancing scientific collaboration and national security in a changing world.
Challenges and Opportunities for International Science Collaboration over the Next Ten Years
Explore challenges and opportunities in global scientific collaboration, featuring insights from a former US Science Advisor on diplomacy, initiatives, and future prospects.
The US-UK Science Collaboration Landscape - Status and Opportunities for the Future
Explore US-UK scientific collaboration, Brexit's impact, and future opportunities in research and innovation with insights from a senior policy advisor.
Recent Advances in Neutrino Physics
Explore recent advances in high-energy neutrino astronomy, including astrophysical flux discovery and potential blazar source identification. Learn about detection methods and future prospects in this cutting-edge field.
Our Galactic Center - A Unique Laboratory for the Physics & Astrophysics of Black Holes
Exploring the Galactic center's supermassive black hole through high-resolution imaging and stellar orbit measurements, revealing unexpected phenomena and testing Einstein's theory of relativity.