Security Champions Program: Scaling Up Cybersecurity Expertise - The What, Why, and How
Explore the importance of Security Champions programs in cybersecurity strategy, including implementation, costs, and benefits for scaling up security expertise in technical teams.
Runtime Security in the Cloud Native World
Explore runtime security in cloud-native environments, focusing on detecting and mitigating security breaches in production. Learn about essential tools and strategies for maintaining robust security measures.
Open Source Security-as-Code: Transforming Cloud Security for Developers
Explore security-as-code's impact on cloud development, addressing challenges and providing actionable intelligence for enhanced cloud security practices.
Secure Software Factory - Adding SBOM and Code Signing to Security Checks
Enhance your security checks with SBOM and code signing in a secure software factory, improving software supply chain integrity and compliance.
Cloud Native Authorization Landscape
Explore the evolving landscape of cloud native authorization, examining key concepts, challenges, and emerging solutions in modern distributed systems.
How the Argo Project Transitioned From Security Aware to Security First
Discover how the Argo project enhanced its security strategy, implementing best practices, formalizing processes, and leveraging community resources to transition from security-aware to security-first.
Securing the Golden Path: Adding Guardrails for Developers Without Compromising Agility
Panel discussion on balancing security and agility in cloud-native development, exploring strategies for implementing guardrails without hindering developer productivity.
Where to Begin Your Developer-Centric Cloud InfoSec Journey
Explore the dev-centric cloud infosec landscape, learn about Terraform templates, and discover tools like Chekov to kickstart your journey in cloud security.
Securing Microservices with a Service Mesh in the Real World
Explore real-world strategies for enhancing microservices security using service mesh technology, presented by VMware expert Michael Farinacci.
Bridging Security and Reality with Open Policy Agent
Explore Open Policy Agent's role in bridging security and real-world scenarios, enhancing policy enforcement and decision-making in modern IT environments.
Architecting for Security in the Cloud
Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.
Secure Software Development Framework: Towards an SDL for All SDLCs
Proposes a flexible Secure Software Development Framework adaptable to various development methodologies, enhancing security while maintaining efficiency and ease of adoption for developers and architects.
Serverless Security and Functions-as-a-Service (FaaS)
Explore serverless security and Functions-as-a-Service (FaaS) with expert insights on potential risks, best practices, and implementation strategies for robust cloud-native applications.
Building Cloud-Native Security for Apps and APIs with NGINX
Enhance NGINX with robust security features for apps and APIs. Learn practical methods for visibility, real-time protection, and mitigation of OWASP Top10 threats, bots, and data leakage in cloud environments.
How Scripting in ZAP Can Bridge the Gap Between Dev Teams and Security
Learn to bridge dev and security teams using ZAP scripting. Explore opportunities, overcome obstacles, and implement effective testing strategies for enhanced application security.
SUSTO: Systematic Universal Security Testing Orchestration
Explore systematic universal security testing orchestration for efficient vulnerability detection and management in software development lifecycles.
Purple Teaming with OWASP PurpleTeam - Security Regression Testing
Explore OWASP PurpleTeam, a security regression testing tool for web apps and APIs. Learn its components, setup, and workflows for early detection of application security defects in build pipelines.
Costly Mistakes in Serverless Computing
Explore common pitfalls in serverless computing and learn how to strengthen your cybersecurity posture when building cloud-based applications.
Software Security Engineering: Lessons from the Past to Fix the Future
Explore software security engineering strategies to eliminate known bugs and achieve 99.99% resilience against zero-day threats. Learn from past events to fix future security problems in applications.
Purple Teaming with OWASP PurpleTeam
Explore OWASP PurpleTeam: a security regression testing tool for web apps and APIs. Learn its journey, architecture, benefits, setup, and various workflows for effective implementation in build pipelines.
Automated Serverless Security Testing: Delivering Secure Apps Continuously
Explore serverless security risks, traditional testing limitations, and a new automated approach for secure serverless development without scripts or delays.