From DevOps to DevSecOps
Explore how Threat Modeling can transform DevOps into DevSecOps, enhancing security, documentation, and team engagement in engineering projects from the start.
The Implementation and Practice of DevSecOps
Explore DevSecOps implementation, tools integration, and maturity models. Learn to shift security left, automate vulnerability detection, and enhance development team skills through practical training approaches.
How Not to Choke on a Big Old Project
Discover effective strategies for managing large legacy C++ projects, exploring DevSecOps, static and dynamic analysis, and quality control platforms to enhance code quality and security.
Measuring DevSecOps - Building Metrics to Understand Effectiveness and Success
Explore key DevSecOps metrics to measure effectiveness, track essential security KPIs, and visualize results using Azure DevOps. Learn to demonstrate success and drive transformation in your development process.
Measuring DevSecOps - Building Metrics to Understand Effectiveness and Success
Explore essential DevSecOps metrics, learn to track and visualize security KPIs, and gain insights to drive transformation and demonstrate success in your development process.
The Telemetry of Trust - Using Attestations to Secure Your Software Development Lifecycle with Open Source Tools
Discover how attestations and cryptographic telemetry can secure software delivery at scale, building trust through verifiable inputs and enabling safer deployment decisions across diverse development environments.
API Security Testing with Noname Security - Overview and Live Demo
Discover how to integrate API security testing into CI/CD pipelines with pre-production capabilities, ensuring rapid and secure API development through hands-on demonstrations.
Centralized Product Security with Amazon Security Lake and Athena
Discover how to centralize security data management using Amazon Security Lake and AWS Athena, enabling unified schema conversion, comprehensive querying, and automated DevSecOps workflows.
Securing AI-Generated Code: Challenges and Solutions for the Future
Explore the critical challenges and solutions for securing AI-generated code, featuring practical tools and research for building AI security engineering capabilities.
Scaling the Security Wall: Agile Threat Modeling for Complex Systems
Discover practical approaches to agile threat modeling for large-scale systems, focusing on cloud architectures, SDLC integration, and cost-effective security strategies.
Secure Containers - Do Reduction Strategies Fix Your Nightmares?
Explore container security challenges and reduction strategies to enhance your Docker environment's protection against vulnerabilities and potential threats.
Transforming Application Security: Protecting Everything as Code
Explore modern application security challenges and solutions in cloud-native environments, from threat modeling to real-time detection, with emphasis on securing 'everything as code' ecosystems.
Enabling Enterprises for DevSecOps Without Fighting the Silos - A Strategic Approach
Discover practical strategies for implementing DevSecOps in enterprise silos, focusing on people, processes, and tools to enhance business KPIs and foster cultural transformation.
С Какого Конца Начинать Безопасную Разработку - Инструменты и Подходы
Узнайте эффективные подходы к внедрению безопасной разработки, включая анализ инструментов сканирования уязвимостей и практические рекомендации по их интеграции в процесс разработки.
Процесс безопасной разработки и как его внедрить без драк в переговорных
Discover effective strategies for implementing secure development processes in organizations, focusing on methodologies, automation, and conflict-free integration with existing workflows.
Product Security Topologies - Применение Team Topologies для повышения безопасности
Discover how to boost product security using Team Topologies framework, with practical examples for resolving inter-team conflicts and enhancing security practices in Agile environments.
Network Policy для разработчиков: как, зачем и почему
Discover how to effectively implement Network Policy in Kubernetes, focusing on declarative approaches, GitOps methodology, and security best practices for microservices deployment.
Руководство по выращиванию политик безопасной разработки
Discover effective strategies for implementing secure development policies while maintaining developer productivity and organizational harmony, with practical guidance on incident prevention.
Integrating Cloud Native Security into the SRE Culture
Explore integrating cloud native security into SRE culture, enhancing DevOps practices with robust security measures for modern infrastructure and applications.
Why We Need to Adopt Static Analysis in Dependency Tools
Explore the importance of static analysis in dependency tools for enhanced security and efficiency in software development.
Sustainable Open Source - Ensuring Long-Term Viability
Explore sustainable open source practices and their impact on DevSecOps. Learn strategies for maintaining long-term project viability and community engagement.