The North Star: Risk-Driven Security - DevSecCon
Discover risk-first threat modeling to identify and prioritize security vulnerabilities, focusing on business risks for effective risk reduction and stakeholder buy-in.
Empowering DevSecOps - Risk-Driven Security and Scaling Application Security
Discover risk-driven security and scale application security across your organization. Learn threat modeling techniques, identify crucial vulnerabilities, and enable business-wide security partnerships.
Practical DevSecOps Transformation - 5 Key Tips for Building a Successful DevSecOps Program
Discover 5 essential tips for implementing a successful DevSecOps transformation, integrating security into development and operations workflows for robust software delivery.
AI for DevSecOps Engineers - Enhancing Security Culture and Education
Explore AI technologies to enhance security testing, analysis, and education for DevSecOps engineers. Learn to automate processes, identify threats, and improve software quality in CI/CD environments.
Power of AI: DevSecOps and Cloud Artifact Signing Explored - Sessions 1 and 2
Explore AI's impact on DevSecOps and cloud artifact signing. Learn how AI enhances security automation, vulnerability scanning, and threat detection. Discover tools for ensuring trust and integrity in cloud environments.
Human vs AI: How to Ship Secure Code
Discover how AI tools like GitHub Copilot and ChatGPT can enhance secure coding practices through real-world examples, tips, and best practices for developers.
Zero Trust Principles in DevSecOps
Explore Zero Trust security principles in DevSecOps, focusing on continuous verification, automated tools, and real-time threat detection. Learn implementation strategies and cultural shifts for improved security.
Motivating Developers to Engage in DevSecOps - Hands-on Docker Security
Dive into DevSecOps with hands-on Docker activities, learning to identify and prevent vulnerabilities while strengthening your software security skills.
The Impact of Policy-as-Code on the Software Supply Chain
Explore DevSecOps principles for securing the software supply chain. Learn to automate, version, and implement controls as code for resilient software ecosystems.
Unveiling Invisible Vulnerabilities: Proactive Strategies for Early Detection
Explore proactive strategies for early vulnerability detection in DevSecOps. Learn how Secure Code Review transforms software security, uncovering hidden threats and fortifying digital ecosystems.
A Glimpse into DevSecOps - Building a Secure NodeJS Service
Explore DevSecOps through building a NodeJS service, focusing on security integration throughout development and deployment. Learn practical insights and best practices for robust, secure software creation.
DevSecOps Unveiled: Integrating Security in the Development Lifecycle
Explore DevSecOps principles and practices for seamlessly integrating security into the development lifecycle. Learn to foster collaboration, automation, and shared responsibility for proactive vulnerability management.
SLSA: Enhancing Software Supply Chain Security - More Than Just a Garnish for Your Pipelines
Explore SLSA principles for securing software supply chains. Learn threat models, security levels, and how to contribute to this OpenSSF project for enhanced DevSecOps processes.
Exploiting and Fixing Vulnerabilities - A Gamified Approach
Discover how gamification and CTFs make application security tangible for developers in cloud-native environments, addressing risks across code, dependencies, containers, and clusters.
(Ab)user Experience: The Dark Side of Product and Security
Explore threat modeling techniques to understand and mitigate potential misuse of digital products by engaging security teams in the product development process.
Building Your First DevSecOps Pipeline
Demystify DevSecOps and build a functional pipeline with cutting-edge security testing, including SCA, SAST, and DAST tooling. Supercharge software security and achieve true "Shift Left" success.
Why Most "How-tos" on Scaling DevSecOps Fail and How to Fix It
Explore challenges in scaling AppSec, learn from Razorpay's experience, and gain a practical framework for scaling DevSecOps effectively.
5 Open Source Security Tools All Developers Should Know About
Discover five essential open-source security tools for CI/CD pipelines. Learn to integrate SAST, secrets detection, SCA, IaC security, and DAST with practical code examples and demos.
Securing Applications in SDLC and Cloud-Native Web and API Protection - Sessions 1 and 2
Learn secure coding practices, identify vulnerabilities, and integrate security into SDLC. Explore cloud-native WAAP for effective web app and API protection using machine learning.
Securing Applications in the Software Development Life Cycle (SDLC) - Beginner
Aprenda prácticas de codificación segura para mitigar riesgos de seguridad y proteger datos en el desarrollo de software moderno.
Software Supply Chain Attacks - Understanding Risks and Prevention
Explore software supply chain attacks: their nature, prevalence, types, recent examples, and best prevention practices. Gain insights into associated risks and protective measures.