Security for DevOps
Learn to identify and prevent application abuse by understanding adversary tactics and implementing effective security architecture in DevOps environments.
Hiding From Big Brother Using Distributed Steganography
Learn techniques for hiding data from surveillance using distributed steganography, exploring methods like hidden files, alternate data streams, and encryption combined with steganographic approaches.
Messaging Security Using GlassFish & Open Message Queue
Explore messaging security in GlassFish and Open Message Queue, covering authentication, authorization, encryption, persistence, logging, and monitoring for robust enterprise messaging systems.
Running at Light Speed - Cloud Native Security Patterns
Explore cloud native security patterns for containerized microservices, covering multi-tenancy, authentication, authorization, and encryption. Learn architectural guidance for secure software design in cloud environments.
Big Data, Little Security - Practical Steps for Securing Big Data
Practical steps for securing big data installations, addressing challenges and vulnerabilities in velocity, variety, and volume. Explores security measures, authentication, and threat modeling.
Web Application Compromise Mitigation with Crypto Anchoring - AppSecUSA
Explore crypto anchoring as a solution to protect sensitive data from breaches, paired with effective monitoring for enhanced web application security.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.
Breaches Are Everywhere - What’s A Good Security Leader To Do?
Explore strategies for security leaders to combat increasing breaches, from IoT vulnerabilities to phishing attacks. Learn essential skills and best practices for effective cybersecurity management.
Money, Apathy, and Cryptography
Explore the intersection of cryptography, distributed systems, and data privacy in the digital age. Learn how new technologies can counter data centralization and shape the future of enterprise infrastructure.
WiFi and Secure Socket Offload in Zephyr
Explore WiFi and secure socket offload in Zephyr OS, focusing on architecture, implementation for TI CC3220SF SoC, and TLS support for secure communication using mbedTLS.
Measurement and Analysis of Private Key Sharing in the HTTPS Ecosystem
Explore HTTPS ecosystem's private key sharing practices, risks, and implications for web security. Learn detection methods and analysis of key sharing among domains and hosting providers.
When Ransomware Strikes
Explore ransomware threats, prevention strategies, and recovery methods with expert insights on protecting your company's data and responding to attacks.
Personal Privacy vs National Security
Debate exploring the tension between individual privacy rights and national security needs, discussing encryption, law enforcement, and government access to communications.
Get Started with Discovering, Protecting, and Governing Sensitive Data
Discover, protect, and govern sensitive data across your organization with Microsoft Purview. Learn about automated classifiers, encryption, and secure collaboration for comprehensive data management.
Ask the Experts - Cloud Data Protection - Best Practices for Backup and Disaster
Explore best practices for cloud data protection, focusing on backup strategies and disaster recovery for Microsoft 365 to ensure business continuity and data security.
How Docker Containers Can Be Used to Spawn Onion Services
Learn to securely spawn Tor onion services using Docker containers, exploring encryption, network architecture, and practical implementation techniques.
Redesigning PKI to Solve Revocation, Expiration, and Rotation Problems
Explore PKI redesign for IoT security, addressing key revocation, expiration, and rotation challenges. Learn from real-world experiences and discover innovative solutions for robust device management.
Return of the Insecure Brazilian Voting Machines
Análise detalhada da segurança do software de votação brasileiro, baseada em resultados de um desafio de hacking restrito organizado pela autoridade eleitoral nacional.
When Everyone's Dog is Named Fluffy - Abusing the Brand New Security Questions in Windows to Gain Domain-Wide Persistence
Explore Windows 10 security questions vulnerability, offering insights on exploiting this feature for persistent access and domain-wide compromise.
XOM-Switch - Hiding Your Code from Advanced Code Reuse Attacks in One Shot
Discover XOM-switch, a security tool enabling XOM on Linux applications using PKU. Learn about its end-to-end approach for protecting deployed apps without source code or heavy binary rewriting.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.