Security for DevOps
Learn to identify and prevent application abuse by understanding adversary tactics and implementing effective security architecture in DevOps environments.
Cryptography Pitfalls
Explore common cryptography pitfalls, modern techniques, and tools to enhance system security. Learn about random number generation, hash functions, ciphers, and authentication protocols.
Cryptography 101 - A History and the Basics of Cryptography
Explore the evolution and fundamentals of cryptography, from ancient ciphers to modern encryption methods, understanding their strengths and vulnerabilities.
Hiding From Big Brother Using Distributed Steganography
Learn techniques for hiding data from surveillance using distributed steganography, exploring methods like hidden files, alternate data streams, and encryption combined with steganographic approaches.
Messaging Security Using GlassFish & Open Message Queue
Explore messaging security in GlassFish and Open Message Queue, covering authentication, authorization, encryption, persistence, logging, and monitoring for robust enterprise messaging systems.
Running at Light Speed - Cloud Native Security Patterns
Explore cloud native security patterns for containerized microservices, covering multi-tenancy, authentication, authorization, and encryption. Learn architectural guidance for secure software design in cloud environments.
Keynote - Historical Lessons for Improving Cyber Security
Historical lessons for improving cybersecurity: outsiders' role in cryptography advances, attention to seemingly foolish ideas, and applying risk analysis from nuclear deterrence to cryptography.
Big Data, Little Security - Practical Steps for Securing Big Data
Practical steps for securing big data installations, addressing challenges and vulnerabilities in velocity, variety, and volume. Explores security measures, authentication, and threat modeling.
Authz is the New Authn - Trust Elevation with UMA and OpenID Connect
Explore standards-based trust elevation in online identity using UMA and OpenID Connect for enhanced fraud mitigation and centralized authentication policies in web access management.
Managing Certificates and TLS Endpoints
Explore TLS/SSL management, vulnerabilities, and tools for maintaining secure systems. Learn about emerging threats, automation techniques, and best practices for certificate and endpoint management.
Preventing Mobile App and API Abuse
Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.
Authentication as a Microservice - Portable Customer Identity Management
Explore microservice-based authentication, portable identity management, and JWT security. Learn advantages, pitfalls, and best practices for decoupling user data in modern applications.
Web Application Compromise Mitigation with Crypto Anchoring - AppSecUSA
Explore crypto anchoring as a solution to protect sensitive data from breaches, paired with effective monitoring for enhanced web application security.
What's New in TLS 1.3
Explore TLS 1.3's security enhancements, new protocol handshakes, and 0-RTT resumption. Learn about potential deployment pitfalls and how to avoid them in this comprehensive overview of the latest TLS version.
A Tour of API Underprotection
Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.
Modern and Secure IAM for Modern Applications
Explore modern IAM strategies for enhanced application security, covering OpenID, JSON Web Tokens, SAML, and FIDO protocols, with practical insights and a demo.
Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities
Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.
Yes, You Too Can Break Crypto - Exploiting Common Crypto Mistakes
Explore common cryptographic vulnerabilities and learn practical techniques to exploit them, enhancing your understanding of secure implementation and potential attack vectors.
Breaches Are Everywhere - What’s A Good Security Leader To Do?
Explore strategies for security leaders to combat increasing breaches, from IoT vulnerabilities to phishing attacks. Learn essential skills and best practices for effective cybersecurity management.
Leakage Resilient Secret Sharing Against Colluding Parties
Explore leakage-resilient secret sharing techniques against colluding parties, discussing bounded collusion protocols, communication complexity, and non-malleable secret sharing.