Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
Security DevOps - Staying Secure in Agile Projects
Explore security integration in agile projects through dynamic depth, static depth, intensity, and consolidation axes. Learn practical DevOps techniques for maintaining security throughout development.
Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life
Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.
Cloud Security at Scale and What it Means for Your Application
Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.
Creating a Buzz - Tales of Building WordPress Honeypots at Scale
Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.
Using End-to-End Distributed Tracing on OCI
Explore end-to-end distributed tracing on OCI for monitoring microservices, from browser to SQL. Learn about APM service, instrumentation options, and powerful trace query language for effective diagnostics.
Automate Infrastructure as Code and Configuration Management
Discover how Oracle Linux Automation Manager and Engine streamline infrastructure automation, enabling efficient software provisioning, configuration management, and application deployment in enterprise environments.
Sharding for Hyperscale and Geographically Distributed Relational Databases
Technical deep dive into Oracle Sharding, covering implementation, use cases, and new features for building applications with petabytes of data, millisecond response times, and extreme availability using a shared-nothing architecture.
Oracle Database Application Development - What's New, What's Next
Discover Oracle Database's latest features for faster, simpler cloud-native app development. Learn about SQL, PL/SQL advancements, CI/CD integration, and productivity-enhancing tools to streamline your development process.
Kubernetes and Microservices with Oracle Database
Explore Oracle Database integration with Docker, Kubernetes, and microservices. Learn current capabilities and future developments for efficient deployment and management of mission-critical applications.
Gain Confidence in Your Database Changes
Explore tools like Liquibase for confident database code deployments, enabling continuous integration and delivery through effective schema change management and version control.
How to Evolve Your Database Applications Entirely Online
Explore Oracle Database features for safe, online schema changes and stored procedure updates without disrupting application traffic. Learn about automated development pipelines and DevOps integration for efficient database evolution.
Osmocom Project Infrastructure - Redmine, Mailman, Git, Gerrit, Jenkins
Explore Osmocom's open-source infrastructure: communication tools, project management, version control, and continuous integration for efficient FOSS development.
Securing DevOps - Common Misconceptions - DefCamp - 2019
Explore common misconceptions in securing DevOps, covering culture shifts, attack scenarios, and key strategies for building resilient systems in this DefCamp 2019 presentation.
Securing Without Slowing - DefCamp - 2017
Explore DevOps-inspired strategies for enhancing security without compromising speed. Learn about rugged DevOps, pipeline protection, and automation to create robust, efficient systems.
On Strategy
Guidance for development teams on implementing effective security strategies, covering risk assessment, compliance, staffing, and integrating security into organizational culture and processes.
Virtual Firewalls - The Good, the Bad and the Ugly
Explore virtual firewalls' advantages, drawbacks, and implementation challenges in cloud environments, covering performance, hardware, and configuration management considerations.
Attacking & Protecting Big Data Environments
Explore techniques for securing and attacking big data environments, focusing on OOP, code execution, and security measures in distributed systems.
API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale
Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.
The Final Frontier - Automating Dynamic Security Testing
Automating dynamic security testing: strategies for efficient, scalable DAST integration in software delivery pipelines, addressing challenges and trade-offs for seamless DevSecOps implementation.
A Stratagem on Strategy - Rolling Testing into Product Testing
Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.