The Best SREs Seem to Be the Ones without an SRE Title—And What We Can Do about It
Exploring why non-SRE titled professionals often excel in SRE roles, examining industry trends, and providing actionable solutions to enhance the value and effectiveness of dedicated SRE teams.
Adversarial Data Mining - Big Data Meets Cyber Security
Explore adversarial data mining techniques in cybersecurity, focusing on big data challenges and solutions for detecting and mitigating threats in complex digital environments.
All Your DNS Records Point to Us - Understanding the Security Threats of Dangling DNS Records
Explore security threats of dangling DNS records, understanding vulnerabilities and potential exploits in domain name systems.
Managerial Visions - Stories of Upgrading and Maintaining the Public Restroom with IoT
Explores IoT implementation in public restrooms, examining governance strategies, cost-reduction efforts, and regulatory techniques. Introduces "managerial visions" concept for understanding computer-mediated collaboration beyond white-collar settings.
Leave Your Phone at the Door - Side Channels that Reveal Factory Floor Secrets
Explore side channel attacks that can compromise factory floor secrets through smartphones, revealing potential security vulnerabilities in industrial settings.
GDPR and Third Party JS - Can It Be Done?
Explore GDPR compliance challenges for third-party JavaScript, examining privacy implications and potential solutions for data protection in web development.
First Contact - Vulnerabilities in Contactless Payments
Explore vulnerabilities in contactless payment systems, examining protocols and potential security risks in this comprehensive analysis of NFC technology.
A Decade After Stuxnet's Printer Vulnerability - Printing is Still the Stairway to Heaven
Explore the enduring security risks in Windows Print Spooler service, a decade after Stuxnet's infamous exploit, and learn about current vulnerabilities in printing systems.
Architecting a Security Program for the Future
Interactive workshop on risk-based security management, using role-playing to assess, prioritize, and mitigate risks in a fictional company. Provides practical tools and strategies for modern cybersecurity challenges.
Leveling Up Your Bug Bounty Program
Explore bug bounty programs: benefits, pitfalls, and implementation strategies. Learn from Indeed.com's experience in leveraging diverse skills to enhance security and uncover critical vulnerabilities.
Building Information Security Program from Scratch
Aprenda a construir um programa de segurança da informação eficaz, focando em métricas, gerenciamento de riscos e contratação de profissionais apaixonados pelo tema.
Building Effective Cyber Security and Risk Management Programs
Explore strategies for developing robust cyber security and risk management programs with insights from Dr. Ron Ross, enhancing organizational resilience against digital threats.
I'm the Guy Your CSO Warned You About
Explore modern social engineering tactics and tools used by cybercriminals, with live demonstrations and practical defense strategies for individuals and organizations.
House of Cards - How Not to Collapse When Bad Things Happen
Discover how to build resilient enterprise security by actively testing defenses, validating controls, and learning from simulated scenarios to prepare for real-world threats and challenges.
Weak Analogies Make Poor Realities
Exploring the shift from viewing cybersecurity as risk to security debt, challenging traditional paradigms and proposing a new approach to articulate and measure software security benefits.
Software Security Austerity - Software Security Debt in Modern Software Development
Explore software security debt in modern development, its sources, management strategies, and consequences with expert insights on risk assessment and mitigation techniques.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.
The Node.js Highway - Attacks Are At Full Throttle
Explore new attack techniques against Node.js applications, including DDoS, password exposure, and business logic vulnerabilities. Learn to identify and mitigate security risks in this popular language.
Connected Vehicle Security
Explore security challenges in connected vehicles, potential threats, and strategies to enhance safety and privacy in the evolving Internet of Things landscape.
Technology, Privacy and the Law - New Challenges for Non-Profits
Explore challenges faced by crisis organizations in balancing information security, privacy, and legal compliance in the digital age, with insights on risks, attackers, and protective measures.
Here Be Dragons - The AWS S3 Logging Minefields
Explore AWS S3 logging challenges and potential security risks in cloud storage. Learn strategies to navigate complex logging configurations and enhance data protection in AWS environments.