Injecting Security to the Cloud
Learn strategies for enhancing cloud security, focusing on automated injection techniques and best practices for safeguarding cloud-based infrastructure and applications.
Fostering an Open Environment for Developers in Regulated Industries
Explore strategies for open-source development in regulated industries, balancing innovation with compliance, risk management, and partnerships while leveraging cloud technologies.
Introduction to CNCF Security Special Interest Group
Explore CNCF Security SIG's history, achievements, and ongoing efforts in cloud-native security. Learn about authentication, authorization, auditing, and policy enforcement in this informative presentation.
Software Quality and Testing - Recognize and Fix the Risks
Learn to recognize and mitigate software quality risks through static analysis, open source management, and best practices for improved development outcomes.
Open Source Technology as a Starting Point to Greater Access and Inclusion
Explore how open source technology fosters diversity, access, and inclusion in corporate environments. Learn strategies for leveraging open source principles to enhance DEI programs and ESG initiatives.
Dynamic Policy Enforcement for Microservice Environments
Explore dynamic policy enforcement strategies for microservice architectures, focusing on security, scalability, and efficient management in complex distributed systems.
Who Pays for Open Source? A Case for Open Governance and Enterprise Contributions
Exploring the financial aspects of open source development, advocating for open governance and enterprise contributions to ensure quality, maintenance, and risk minimization in collaborative software projects.
A New Ontology of Unwanted Web Automation
Explores a new ontology for classifying automated threats to web applications, focusing on misuse of valid functionality and its impacts on security and privacy.
Grip on Secure Software Development - Dutch Government Standard for Outsourcing - AppSecEU 2016
Learn about the Dutch government's standard for secure outsourcing, exploring key principles and practices for effective implementation in software development projects.
Legacy Java Vulnerabilities - Ignore at Your Own Risk
Explore legacy Java vulnerabilities, their persistence, and mitigation strategies. Learn about security risks, update challenges, and alternative approaches for protecting enterprise applications.
Using Third-Party Components for Building Secure Software - AppSec EU 2016
Explore secure software development, third-party component risks, and maintenance strategies for effective vulnerability management in enterprise applications.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Security Touchpoints When Acquiring Software
Explore key security considerations and touchpoints in software acquisition, focusing on best practices for ensuring secure integration of third-party solutions.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.
Leveraging the ASVS in the Secure Software Development Lifecycle
Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.
The Evil Friend in Your Browser - Browser Extension Security Risks
Explore the security risks of browser extensions, their potential for data breaches, and the limitations of current security models. Learn about threat analysis and user protection strategies.
Why Checking Infrastructure-as-Code for Misconfigurations Is Not Enough - Comprehensive Cloud-Native Application Security
Explore comprehensive cloud-native app security beyond misconfigurations. Learn dynamic assessment techniques for robust architecture design and compliance in modern software development.
OWASP Top 10 - Introduction to Web Application Security Risks
Comprehensive overview of OWASP Top 10, exploring critical web application security risks and effective mitigation strategies for developers and security professionals.
The 2013 OWASP Top 10 - Understanding Web Application Security Risks
Comprehensive overview of OWASP Top 10 2013, covering changes, risks, and mitigation strategies for web application security. Essential for developers and security professionals.
Top Ten Proactive Web Application Controls
Learn essential proactive controls for securing web applications, focusing on key strategies to prevent vulnerabilities and enhance overall security posture.
Tips and Tricks - Protecting Cloud Infrastructure
Explore best practices for safeguarding cloud infrastructure, focusing on data protection, compliance, and risk management in Linux-based environments.