WebAuthn - Balancing Strong Authentication, Privacy, and Convenience
Explore the balance between robust authentication, user privacy, and ease of use in WebAuthn implementation for enhanced online security.
How to Govern and Maintain Compliance Using Open Source Identity Management Components
Explore open-source identity management with midPoint for efficient governance, compliance, and automation. Learn integration, role-based access control, and advanced features through practical scenarios and demos.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
Why Using SMS in Authentication is Risky and Better Alternatives - AppSecUSA 2016
Explore limitations of SMS-based authentication and discover more secure alternatives using push notifications for improved user experience and enhanced security in two-factor authentication.
How Web Authentication Works: TLS, Password Hashing, OpenID Connect, OAuth 2, and JSON Web Tokens
Explore the inner workings of web authentication, covering TLS, password hashing, OpenID Connect, OAuth 2, and JSON Web Tokens in this comprehensive overview.
Take Control of Identity - Flexible Solutions for Developers
Explore flexible identity solutions for developers, addressing common pain points and offering adaptable options for users and companies across diverse scenarios.
A Developer's Guide to SAML
Learn SAML protocol essentials, implementation in modern applications, and troubleshooting tips. Gain insights into this widely-used identity security standard and its nuances across different applications.
Learning the Okta CLI - Introduction and Usage Guide
Discover how to efficiently manage Okta identity and access management using the command-line interface, enhancing your development workflow and productivity.
Start Simple to Scale Decentralized Identity - Panel Discussion
Experts discuss strategies for implementing and scaling decentralized identity systems, focusing on practical approaches and real-world applications.
Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE
Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.
Throw Away Your Passwords - Trusting Workload Identity
Explore modern workload identity solutions for enhanced security, eliminating password vulnerabilities in cloud-native environments.
Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
HashiCorp's Multicloud Zero Trust Platform
Explore HashiCorp's innovative platform for implementing zero trust security across multicloud environments, enhancing data protection and access control.
Trust No System: The Unsettling Reality of Zero Trust
Challenging "Zero Trust" in cloud-native security, this talk explores trust as an observer's decision, debunks myths, and offers strategies for managing trust in cloud environments.
Achieving End-to-End Software Supply Chain Security with in-toto
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
SPIFFE: In Theory and Practice - Deep Dive and Q&A
Explore SPIFFE's vision, components, and role in cloud-native environments. Learn about the SPIFFE specification, IDs, naming, and trust domains in this informative deep dive with Q&A.
Fighting the Next War - Future Threats to OSS and Software Supply Chain Security
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
OmniBOR: Bringing the Receipts for Supply Chain Security
Discover OmniBOR, a revolutionary approach to capture artifact dependency graphs in software development, enhancing supply chain security and reducing false positives in vulnerability scanning.
Demystifying Zero-Trust for Cloud Native Technologies
Explore zero-trust principles for cloud-native environments, covering identity, policy, continuous assessment, and security. Learn implementation guidelines for protecting users, devices, networks, applications, and data.
SLSA FRSCA Recipe for Secure Supply Chain
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Zero Trust Supply Chains with Project Sigstore and SPIFFE
Explore zero trust supply chains using Sigstore and SPIFFE. Learn how to enhance software security through cryptographic verification, transparency logs, and verifiable identities in build systems.