How HMRC Digital Secures Services at Scale
Discover HMRC Digital's strategies for securing large-scale services, exploring innovative approaches to DevSecOps implementation and risk management in digital tax systems.
Open-Source Vulnerability Management: Use the Source - DevSecOps 2022
Explore open-source vulnerability management techniques using source code analysis for effective security practices in DevSecOps environments.
There's Somebody in My Package Manager - Security Risks and Mitigation
Explore package manager security risks and learn strategies to protect against supply chain attacks in software development.
Securing the Software Factory
Explore strategies for securing the software development lifecycle, from code to deployment, enhancing overall application security and resilience.
DevSecOps Transformation at Speed and Scale Using Tekton
Standardize CI/CD security automation, centralize platform operations, and prevent software vulnerabilities using Tekton as an open-source orchestrator with integrated scanning tools and continuous compliance.
Automated DevSecOps Maturity Assessment
Explore automated DevSecOps maturity assessment techniques to enhance security integration and streamline development processes for improved efficiency and risk management.
Why Put Security in DevOps - and How
Explore integrating security into DevOps practices, understanding its importance and implementation strategies for enhanced software development.
Great Security Is One Question Away
Discover how asking the right security questions can transform your Python development practices and enhance overall project safety.
Supply Chain Security for Open Source Projects
Explore supply chain security strategies for open-source projects, enhancing protection against vulnerabilities and ensuring robust software development.
MetricCA: Revolutionizing Metrics Collection and Analysis for DevSecOps
Explore MetricCA, a revolutionary tool for DevSecOps metrics collection and analysis. Learn about maturity models, assessment strategies, and practical implementation techniques.
Securing the Endpoint with Open Software - DevSecOps 2023
Explore open-source tools for endpoint security, focusing on osquery and Fleet. Learn to query and monitor system data for enhanced protection and management.
Ten Ways to Doom Your DevSecOps
Discover common pitfalls in DevSecOps implementation and learn how to avoid them for successful integration of security into your development processes.
Practical Steps for Securing the Entire SDLC
Practical steps for securing the entire software development lifecycle, moving beyond secure coding to embrace holistic system security throughout the development process.
Security as a Culture: The Distributed Advocacy Approach
Explore distributed advocacy in cybersecurity, integrating security into development processes. Learn how to foster collaboration between security advocates and developers for enhanced system protection.
CVE Context Matters - Prioritizing Vulnerabilities in Cloud-Native Projects
Explore vulnerability scanning in cloud-native projects, learn to prioritize vulnerabilities, and implement effective scanners. Gain insights on assessing relevance and improving daily workflows.
GRC Engineering - Bringing Governance, Risk, and Compliance to Your Git Repositories
Explore innovative approaches to integrate Governance, Risk, and Compliance directly into git repositories, revolutionizing how organizations handle compliance and security challenges.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
Threat Modeling at Scale: More Than Shifting Left
Empower developers with scalable threat modeling techniques to enhance application security, save time and money, and make secure development more attainable.
Open Source Vulnerability Management for Software Development and Cloud Environments
Explore open source vulnerability management strategies for software development and cloud environments in this IT security conference talk by Stefan Fleckenstein at TROOPERS24.
Securing the Software Commons: Standards, Automation, and AI for a Resilient Open Source Future
Explore how standards, automation, and AI can revolutionize open source software security, scaling defenses against growing threats and empowering developers in vulnerability management.
Secure Software Supply Chain at IBM
Explore IBM's approach to securing the software supply chain, focusing on key strategies and best practices for enhancing cybersecurity in development processes.