The Perimeter Has Been Shattered - Mobile and IoT Security Challenges
Explore how mobility and IoT have disrupted traditional enterprise security, examining new threats and the limitations of current defenses. Learn practical strategies to improve mobile and IoT security in the modern landscape.
Understanding the Threats and Attacks on Data Science Applications
Explore threats to data science applications, from infrastructure vulnerabilities to attacks on algorithms and developers. Learn to secure your data and protect against emerging risks.
Software Supply Chain Lifecycle Management: Reducing Attack Vectors and Enabling Rugged DevOps
Exploring software supply chain lifecycle management to reduce attack vectors and enable rugged DevOps, focusing on IoT security, third-party software risks, and standards-based automation for threat detection.
Chromebooks and Network Motes: Enforcing Security Posture from Device to Cloud
Explore innovative security strategies using Chromebooks and network motes, balancing developer productivity with robust data protection in resource-constrained environments.
Juggling the Elephants - Making AppSec a Continuous Program
Strategies for implementing a continuous AppSec program that integrates security initiatives, enables DevOps, and addresses portfolio-wide coverage while prioritizing risks and fostering continuous improvement.
The Anatomy of Modern Deceptive Technologies - Closing Keynote
Explore modern deceptive technologies in cybersecurity with expert Chris Roberts. Learn about evolving threat matrices and innovative protection methods for enterprise, industrial, and IoT environments.
Normalizing AppSec Issues for Contextual Risk-Based Prioritization at Enterprise Scale
Explore a new approach to Application Security that focuses on critical risks by incorporating contextual intelligence, improving efficiency and delivery in enterprise-scale programs.
OWASP SEDATED - Preventing Sensitive Data Disclosure in GitHub Commits
Prevent sensitive data leaks to GitHub with SEDATED, an analyzer that catches and blocks commits containing user credentials or tokens before they're pushed.
Integrating Mobile Devices into Penetration Testing Programs
Explore techniques for assessing mobile device security risks in enterprise environments, including phishing, undermining controls, and using compromised devices as pivot points.
Enterprise-wide SSL Automation with Lemur and CloudCA
Explore enterprise-wide SSL automation using Lemur and CloudCA, enabling developers to easily manage SSL certificates and enhance security across applications.
Security Onion Hybrid Hunter Beta 2 - New Hunt Interface Overview
Explore Security Onion's new Hunt interface in Hybrid Hunter Beta 2, enhancing threat detection and investigation capabilities for enterprise security teams.
Installing Security Onion Hybrid Hunter Beta 1 in a Virtual Machine
Step-by-step guide to installing Security Onion Hybrid Hunter Beta 1 in a virtual machine, demonstrating the setup process for this network security monitoring platform.
The Impact of Media on Cybersecurity: Using Art to Visualize Software Supply Chain Security Trends
Explore how media influences open source software security through artistic visualization, combining cybersecurity trends with creative techniques to enhance awareness of vulnerabilities.
Open Source Cybersecurity - Addressing Challenges in Software Security
Explore open source cybersecurity challenges and solutions with industry experts, discussing survey findings, enterprise impacts, and automation strategies for improved software security.
Practical Security in Web Applications
Explore effective methods to identify and avoid common security pitfalls in web applications. Learn to build secure enterprise web presence and protect against vulnerabilities.
How I've Broken Every Threat Intel Platform and Settled on MISP
Exploring challenges in threat intelligence platforms and advocating for event-based approaches. Discusses experiences with various systems and settling on MISP for effective correlation and analysis of cyber threats.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Understanding Technical and Enterprise Tradeoffs in Cybersecurity
Explore strategies for navigating cybersecurity challenges in organizations, understanding human behavior, and negotiating better decision-making when faced with resistance to implementing security solutions.
Could Passwordless Authentication Be Worse Than Passwords?
Explore vulnerabilities in passwordless authentication, revealing how faulty implementations can lead to greater security breaches than traditional passwords. Learn best practices for developers, pentesters, and users.
Next Generation Enterprise Security - Lessons from Star Trek
Explore enterprise security through Star Trek: The Next Generation episodes, analyzing threats, defenders, and potential mitigations in a fun, engaging way.
Security Risks of Low-Code/No-Code Applications - What Could Go Wrong?
Explores security risks of low-code/no-code platforms used by business professionals. Presents research findings, demonstrates common security issues, and introduces OWASP framework for mitigating risks in business-led development.