
Explores the effectiveness of AppSec training for developers through a year-long survey, revealing surprising insights on knowledge retention and its impact on application security strategies.

Explore NIST's mission, impact on US industry, and cybersecurity initiatives. Learn about current programs, projects, and R&D activities in this premier scientific institution.

Practical insights on implementing Content Security Policy in a live web application, covering challenges, browser nuances, third-party integrations, and real-world violation reports.

Learn how Content Security Policy (CSP) can prevent XSS attacks, understand its versions, browser support, and implementation strategies for web applications. Gain insights on balancing CSP with traditional security measures.

Explore Ireland's development and open-sourcing of COVIDGreen, a contact tracing app, through insights from key stakeholders in this informative panel discussion.

Explore TEEP implementation on RISC-V Keystone and Arm TrustZone, covering use cases, prototypes, and CBOR expressions for secure execution environments.

Explore DevSecOps implementation, covering SAST, DAST, IAST, training tools, and maturity models. Learn best practices for integrating security into the development lifecycle.

Explore TEEP implementation on RISC-V Keystone and Arm TrustZone, focusing on secure provisioning techniques for trusted execution environments in embedded systems.

Explore unikernel-based de-aggregation for enhanced automotive security, focusing on COQOS Hypervisor, Unikraft architecture, and TEE virtualization case study.

Explore challenges and solutions for enhancing open source software security, addressing developer motivations and industry-wide strategies for safer code practices.

Explore SUSI.AI, a privacy-focused smart assistant. Learn about its features, development, and how it prioritizes user data protection while providing intelligent assistance.

Explore techniques to subvert Integrity Measurement Architecture (IMA) in Linux systems, examining attack vectors, security guarantees, and potential mitigations.

Explore key threat modeling methodologies and their applications in open source civil infrastructure platforms, enhancing security practices for critical systems.

Explore rust-vmm's security journey, covering components, audits, development practices, and fuzzing techniques for virtualization and Virtio components.

Learn to automatically generate Software Bill of Materials (SBOMs) for open source projects, enhancing security and compliance across languages and platforms.

Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.

Learn to generate SPDX Software Bill of Materials (SBOM) for your code in continuous integration using the OSS Review Toolkit (ORT), enhancing software transparency and security.

Explore best practices for developing secure open source software with expert guidance on risk mitigation, vulnerability management, and collaborative security measures.

Explore the inner workings of web authentication, covering TLS, password hashing, OpenID Connect, OAuth 2, and JSON Web Tokens in this comprehensive overview.

Integrate Kong API gateway with Okta OIDC for seamless authentication, eliminating the need for your application to manage OIDC flows directly.

Learn to implement JWT-based CSRF protection and establish trust between microservices using JWTs, with practical code examples and insights into secure microservice architecture.