An Open-Source Taxonomy for Ex-ante Privacy
Explore an open-source taxonomy for implementing privacy protections early in software development, featuring annotation tools and risk evaluation based on ISO/IEC 27701 standards.
Trusted Execution: A Deterministic Approach to AppSec for Zero-Day Threat Prevention - 2016
Explore Trusted Execution, a novel approach to application security that promises zero-day threat prevention through granular memory-level visibility and context, eliminating false positives in advanced security threats.
Automation Beyond Testing and Embedded System Validation
Exploring automation beyond testing for embedded systems, including ad-hoc scripting, factory flashing, and CI for system updates. Discusses separating automation from testing infrastructure for flexibility.
Making DevSecOps Happen with Containers - Security Concerns and Solutions
Explore DevSecOps implementation with containers, addressing security concerns through automation and collaboration. Learn to bridge the gap between DevOps and security teams for better application protection.
Automated Testing Laboratory for Embedded Linux Distributions
Explore key challenges and solutions in building automated testing infrastructure for embedded Linux, focusing on Tizen OS. Learn to create an open-source testing lab for quality assurance.
State of the U-Boot Project - Current Developments and Future Goals
Explore U-Boot's evolution, unified environment, EFI support, CI testing, and ongoing developments. Learn to leverage these features and contribute to the project's advancement.
Testing with Volcanoes - Fuego and LAVA Going Distributed
Explore distributed testing with Fuego and LAVA, combining tools for broader coverage across multiple sites. Learn integration techniques, infrastructure setup, and future developments in embedded Linux testing.
Farming Together: Building Open-Source Board Farms for Continuous Integration
Explore board farm challenges and solutions for continuous integration in embedded systems. Discuss harmonizing efforts to create an open-source platform for automated testing and remote development.
DevSecOps: Integrating People and Automation in Application Security
Explore DevSecOps principles, focusing on human aspects like collaboration, communication, and decision-making to enhance application security within real-world constraints.
The Only Reason Security Matters for DevOps - APPSEC Cali 2018
Explore DevOps' impact on security, focusing on strategic business drivers, modern challenges, and practical recommendations for integrating security into DevOps using a simplified framework.
A DevSecOps Tale of Business, Engineering, and People
Explore DevSecOps through a historical lens, examining its impact on business, engineering, and resilience. Learn from past challenges to build high-performing teams and implement effective DevSecOps strategies.
Jumpstarting Your DevSecOps Pipeline with IAST and RASP
Learn to create an effective DevSecOps pipeline using free tools like IAST and RASP. Gain real-time security feedback, continuous vulnerability analysis, and enhanced attack visibility for improved application security.
Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines
Explore methods for calculating and tracking web application attack surface evolution, and learn to integrate security testing into CI/CD pipelines using metrics-based policies.
Juggling the Elephants - Making AppSec a Continuous Program
Strategies for implementing a continuous AppSec program that integrates security initiatives, enables DevOps, and addresses portfolio-wide coverage while prioritizing risks and fostering continuous improvement.
Monitoring Attack Surface and Integrating Security into DevOps Pipelines
Explore methods for calculating and tracking web application attack surface, and learn to integrate security testing into CI/CD pipelines for effective DevOps practices.
DevSecOps Roundup - An Overview of the Current State
Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Requirements Gathering for Successful DevSecOps Pipeline - AppSec EU 2017
Discover key requirements for implementing a security-focused automated development pipeline in your organization, addressing assessment, bottlenecks, training, metrics, and monitoring.
Monitoring Application Attack Surface to Integrate Security into DevOps Pipelines
Explore integrating security into DevOps pipelines through application attack surface monitoring. Learn strategies from a recognized expert to enhance your organization's software security practices.
Scaling Security in Leading Companies - DevOps and CI/CD Best Practices
Discover pro-tips and actionable lessons from mature security teams on scaling security in modern software development. Learn effective strategies for buy-in, engineering projects, analysis integration, and production monitoring.
Looking Towards the Future of Open Source Vulnerability Management
Explore the evolving landscape of open source security, focusing on vulnerability management strategies, industry trends, and best practices for effective remediation and continuous security integration.