Growing the Chain: Trusting Build Provenance from Userspace
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Understanding the Sec in DevSecOps: Beyond Just Shifting Left
Explore attack vectors, preventive measures, and compliance strategies in DevSecOps. Learn innovative approaches to enhance software security beyond shifting left.
DevSecOps Orchestration of Text Analytics with Containers
Explore secure container usage for text analytics in intelligence processing, focusing on Docker and Kubernetes for DevSecOps orchestration.
Serving Millions of Customers with Cloud Native and DevSecOps
Learn how a leading financial organization modernized its infrastructure using cloud-native technologies and DevSecOps practices to serve millions of customers efficiently and securely.
Automate Security - Lessons Learned from Successful Security Automation Programs
Learn key strategies for successful security automation, increasing team efficiency, and engaging external teams. Gain insights from real-world examples to kickstart your automation journey and achieve rapid results.
Automating Architectural Risk Analysis with Open Threat Model Format
Explore automating architectural risk analysis using Open Threat Model format. Learn to create OTM files, integrate threat modeling into DevSecOps, and address challenges in software development security.
Securing Modern Applications and APIs Against Attacks
Explore effective API security strategies for modern applications, focusing on deep application knowledge and user behavior to protect against evolving threats in cloud-native architectures.
Security Observability 101 - Thinking Inside the Box
Explore security observability using Java Observability Toolkit (JOT) for runtime instrumentation, analyzing defenses, identifying vulnerabilities, and enforcing policies without coding.
OWASP ZAP and DeepFactor - Continuous AppSec Observability for DevSecOps
Explore how DeepFactor's observability enhances OWASP ZAP for comprehensive DevSecOps, detecting security risks in modern cloud-native applications through advanced event monitoring.
Why Security Fails and How to Solve It - Lessons from Real-World Assessments
Explore real-world security failures and innovative solutions with insights from Praetorian's field experiences. Learn actionable steps to enhance cybersecurity through smarter practices and cutting-edge tools.
Ten DevSecOps Culture Failures
Explore common pitfalls in implementing DevSecOps culture and learn strategies to overcome them for more effective security integration in software development.
More with Less Screen Time: An Application Security Toolchain
Discover efficient application security strategies and toolchains to maximize productivity while minimizing screen time in this insightful conference talk by Spyros Gasteratos.
Empowering the Guardians of Your Code Kingdom
Explore strategies for empowering developers to become guardians of code security, enhancing application protection and fostering a security-first mindset in software development.
Hands-on Introduction to Snyk - Security Scanning for Dependencies, Code, and Containers
Comprehensive introduction to Snyk, covering dependency security, code analysis, container scanning, and Kubernetes YAML scanning. Hands-on demonstration of Snyk's features for identifying and addressing vulnerabilities.
Elite Security Champions: Building a Strong Security Culture in DevSecOps
Explore building an elite Security Champion program for DevSecOps success. Learn essential skills, program elements, and strategies to create a strong security culture and maximize ROI.
Build More Secure Apps with OWASP SKF and ASVS on Kubernetes
Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.
Knowing What Risks Matter and Don't in Your Open Source
Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.
Towards Intelligent Application Security
Exploring the evolution of application security and proposing an automated approach integrating security into development and operations, aided by learning techniques and threat intelligence.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.