Impact of the Individual
Explore the impact of individual participation on innovation, featuring insights from industry leaders and real-world examples of open-source collaboration in government and technology.
From Monolith to Containers - How Verizon Containerized Legacy Applications on OpenShift
Explore Verizon's journey in containerizing legacy applications using OpenShift, including challenges, successes, and lessons learned in modernizing critical revenue-generating systems.
What Do Home Devices, Your Business Processes, and Chatbots Have in Common? Revenue
Explore how chatbots, home devices, and business processes can be integrated to enhance customer relationships and drive revenue using container technology and OpenShift platform.
Microservices and FaaS for Offensive Security
Explore offensive security using microservices and FaaS, covering Lambda, Google Cloud, IBM OpenWhisk, and more. Learn practical applications and improvements for cybersecurity projects.
Robust Defense for the Rest of Us
Discover practical strategies for robust network defense, tailored for small organizations with limited resources. Learn how to leverage flexibility and homefield advantage for effective cybersecurity.
Prisoner Number Six
Explore Docker container escape techniques through live demonstrations, covering reconnaissance, exploiting vulnerabilities, and gaining system access. Learn practical cybersecurity skills for container environments.
CloudSec Rules Everything Around Me - C.R.E.A.M.
Explore cloud security essentials, from shared responsibility to logging, compliance, and incident response. Learn best practices for AWS, Azure, and Office 365 environments.
Determining Normal - Baselining with Security Log and Event Data
Learn effective strategies for baselining security logs and event data to identify anomalies, establish normal patterns, and enhance threat detection capabilities in your organization.
DYODE - Do Your Own Diode for Industrial Control Systems
Learn to build and implement data diodes for secure industrial control systems, covering hardware, software, workflows, and threat modeling.
I Am Become Loadbalancer, Owner of Your Network
Explore load balancer architecture, deployment, and post-breach access. Learn to navigate systems, avoid detection, and exploit configurations across various platforms for enhanced network control.
Beyond Logs and Time Series - Observability for Security & Privacy
Explore advanced observability techniques for enhanced security and privacy, moving beyond traditional logs and time series data to improve threat detection and investigation.
Abusing Webhooks for Command and Control
Explore techniques for establishing covert command and control communication using webhooks, bypassing strict network defenses and avoiding detection in penetration testing scenarios.
Security and DevOps Are Really Best Friends
Explore the synergy between security and DevOps, focusing on asset management, automation, and best practices for enhanced cybersecurity in modern IT environments.
Zero Trust Networks - In Theory and in Practice
Comprehensive exploration of Zero Trust Networks, covering theory, implementation strategies, key systems, and practical considerations for enhanced network security.
WAFs FTW! A Modern DevOps Approach to Security Testing Your WAF
Explore modern DevOps approach to security testing Web Application Firewalls (WAFs) using Framework for Testing WAFs (FTW). Learn objective WAF evaluation, rapid prototyping, and continuous testing strategies.
The DevSecOps Playbook - From A Practitioner's Perspective
Practical guide to implementing DevSecOps, covering mindset shifts, automation, communication strategies, skill requirements, and collaborative tools for safer software development.
Creating an AppSec Pipeline With Containers in a Week - How We Failed and Succeeded
Explore the journey of implementing an AppSec pipeline using Docker containers, addressing challenges, solutions, and best practices for effective security integration in development workflows.
Practical Static Analysis for Continuous Application Security
Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.
Using Language-Theoretics and Runtime Visibility to Align AppSec with DevOps
Explore LANGSEC methodology and RASP tools for aligning AppSec with DevOps, enhancing runtime security visibility, and addressing vulnerabilities beyond traditional techniques.
Cleaning Your Applications' Dirty Laundry with Scumblr
Learn about Scumblr, an open-source tool for application security at scale. Discover how Netflix uses it for vulnerability management, risk tracking, and automating security tasks in a dynamic cloud environment.
Threat Modeling With Architectural Risk Patterns
Explore efficient threat modeling using architectural risk patterns, emphasizing software-centric methods to enhance speed and consistency in identifying security risks across enterprise environments.