Topics of Interest: Developers Struggle with Application Security and How to Make It Better
Explore challenges in application security for developers and learn strategies to improve DevSecOps practices, drawing from real-world experiences at major tech companies.
How to Have Visibility and Security of a CI/CD Pipeline
Discover strategies for enhancing visibility and security in CI/CD pipelines, focusing on best practices and tools to safeguard your software development lifecycle.
OWASP DSOMM Project - Introduction to DevSecOps Maturity Model
Explore the OWASP DSOMM Project, a framework for enhancing software security practices and measuring DevSecOps maturity in organizations.
Fast Follower Strategy and Preserving America's Technological Edge
Explore strategies for maintaining America's technological edge, focusing on innovation, cybersecurity, and competition with China in this insightful panel discussion with industry experts.
Using Open Source Software to Build an Industrial-grade Embedded Linux Platform
Explore building industrial-grade embedded Linux platforms using open-source components. Learn about bootloaders, kernels, toolchains, and filesystems, with insights on selection, integration, and maintenance.
OWASP Glue Tool: Security Automation Made Easier
Learn about OWASP Glue Tool, a Ruby gem for security automation that coordinates multiple analysis tools and generates reports, simplifying the process of integrating security into development workflows.
Making Security Agile in CI/CD Environments
Integrating security into agile development and CI/CD pipelines. Learn strategies to automate security processes, leverage QA tests, and utilize tools for improved productivity in application security.
Security Automation in the Agile SDLC - Real World Cases
Explore real-world examples of implementing successful security automation in fast-paced development environments, focusing on agile methodologies, DevOps, and continuous integration for secure software delivery.
An SDLC for the DevSecOps Era
Explore an SDLC tailored for the DevSecOps era with insights on integrating security into modern development practices and organizational culture.
Continuous Acceleration: Why Continuous Everything Requires a Supply Chain Approach
Explore the need for a supply chain approach in continuous development practices, emphasizing acceleration and efficiency in modern software security and delivery processes.
Implementing a Supply Chain Approach to Build and Deploy Secure Applications - AppSecEU 2016
Explore implementing a supply chain approach to build and deploy secure software, focusing on trust, standardization, and automation in the software delivery pipeline.
Stop Chasing Vulnerabilities - Introducing Continuous Application Security
Explore continuous application security strategies using open-source tools for real-time monitoring and analytics, shifting focus from individual vulnerabilities to comprehensive portfolio-wide assurance.
Auto Generate SBOMs for Open Source Projects in Any Language and Platform
Learn to automatically generate Software Bill of Materials (SBOMs) for open source projects, enhancing security and compliance across languages and platforms.
Generating a SPDX SBOM for Your Code in CI Using ORT
Learn to generate SPDX Software Bill of Materials (SBOM) for your code in continuous integration using the OSS Review Toolkit (ORT), enhancing software transparency and security.
Board Farms for Everyone - Making Hardware Debugging Easier and Sharing Boards Across the Globe
Discover how to create a board farm for remote hardware debugging, simplifying development and enabling global collaboration. Learn practical tips for setup, integration, and efficient device management.
Automated Testing and Board Farming for Embedded Linux
Explore practical aspects of running board farms for embedded Linux testing. Discuss control software, architectures, hardware tools, and collaboration opportunities in automated testing.
Shifting Application Security Left: Practical Steps to Get There
Explore practical steps to integrate automated security testing into software delivery pipelines, enabling efficient and secure development practices for modern engineering teams.
Automated Testing for Embedded Development - Next Generation Board Farming
Explore next-generation board farming techniques for automated testing in embedded development, enhancing efficiency and reliability in hardware-software integration.
Extensible Open-source CI for Firmware with Real Hardware Execution
Explore an extensible open-source CI system for firmware, featuring real hardware execution capabilities and insights from HPE experts.
Delivering Security Fixes Continuously Into Your Embedded Linux
Learn strategies for continuous security updates in embedded Linux systems, focusing on update models, test automation, and minimizing out-of-tree code. Explore real-world examples using EMLinux and open-source contributions.
Securing the Software Supply Chain: From Threats to Best Practices
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.