Data Protection at AWS - Securing Cloud Applications
Discover essential strategies for securing AWS-based applications, including network protection, encryption, key management, and storage architecture. Learn from real-life examples to avoid common pitfalls and ensure data safety.
FluBot
Explore the inner workings of FluBot, an Android malware that impersonates banking apps, and learn about its sophisticated countermeasures against detection and analysis.
File Hider Java Project - Learn Encryption, OTP, and Email Authentication With Source Code
Develop a Java file hider with MySQL, implementing email authentication, login, and encryption. Perfect for students to enhance programming skills and learn security features.
Verifiable Build Environments in the Cloud - Powered by Sigstore and Enclaves
Explore how Sigstore enhances confidential computing security, minimizing trusted compute base while maintaining engineering velocity. Learn about cloud-based verifiable build environments.
Zero Trust Networking in Practice with a Service Mesh - Workshop
Practical workshop on implementing zero-trust network security in Kubernetes using service mesh. Covers encryption, authentication, authorization, PKI setup, and principle of least privilege.
What's New in Linkerd 2.9 - mTLS for All TCP Connections, ARM Support, and More
Explore Linkerd 2.9's enhanced security features, including zero-config mTLS for all TCP connections, ARM support, multi-core proxy runtime, and Kubernetes service topology integration.
Open Source Encryption and Export Regulations - The New Compliance Frontier
Explore encryption in open source software, export regulations, and compliance strategies. Learn tools and best practices for identifying encryption and managing export compliance in commercial software solutions.
Storing Secrets in the Cloud and Data Center: Strategies and Tools
Explore strategies for securely storing and managing credentials in cloud and data center environments, covering tools, technologies, and best practices for developers and operational teams.
Ten Secrets to Secure Mobile Applications
Discover key strategies for securing mobile apps, focusing on encryption, web service design, and user privacy. Learn to threat model and address top vulnerabilities using OWASP Mobile Top Ten framework.
Top 10 Security Best Practices for Securing Microservices
Comprehensive guide to securing microservices, covering TLS, authentication, authorization, DDoS protection, monitoring, encryption, and more. Essential for developers and architects building scalable, secure APIs.
Android Password Manager Security Analysis - AppSec EU 2017
Explore Android password manager security, common vulnerabilities, and best practices for protecting stored secrets. Learn about implementation pitfalls and design failures in popular apps.
NOSQL Web Application Vulnerabilities and Mitigation
Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.
OWASP PHP Security Project - Securing Web Applications with PHP Libraries and Tools
Explore secure PHP development with OWASP's project, featuring decoupled libraries and tools for enhanced web application security. Learn encryption, password management, and protection against common vulnerabilities.
The Secret to Brewing Up a Good API
Learn essential techniques for creating robust, user-friendly APIs, covering documentation, design, typing, pagination, error handling, authentication, and security best practices.
Don't Mind the Gap - Securely Accessing Cloud Resources with SPIFFE/SPIRE
Explore secure cloud resource access using SPIFFE/SPIRE for identity federation. Learn to access AWS and other services without managing API keys, simplifying cross-cloud interactions.
The Unbreakable Code Whose Breaking Won World War II - Enigma Machine Emulator in Ruby
Explore the Enigma machine's history and mechanics through an OOP-based Ruby emulator, uncovering WWII code-breaking secrets and drawing parallels to modern development patterns.
Better Protect Sensitive Data in the Cloud with Client-Side Application Layer Encryption
Learn to implement client-side application layer encryption for enhanced data protection in cloud environments, reducing breach risks and maintaining control over sensitive information.
Enhancing Security with Mutual Authentication in Cilium Service Mesh
Explore Mutual Authentication in Cilium Service Mesh to fortify microservices communication, mitigate risks, and ensure seamless authentication and encryption while leveraging advanced network policies.
The Security Evolution of gRPC Services in the Mesh
Explore the evolution of securing gRPC services in containers and service mesh, focusing on Istio's role in enhancing security posture for east-west traffic without sidecar complexity.
What Happens Before the Backend Gets the Request
Explore the journey of a request to the backend, from acceptance to processing. Gain insights into the crucial steps occurring in the kernel before request processing begins.
Security on Android - What's Next
Explore Android security features, new APIs, and best practices for app integrity and data privacy. Learn about encryption, key management, user authentication, and transparency layers.