Attacking and Defending Mobility and IoT on the Enterprise Network
Exploring modern mobile and IoT security challenges, this talk examines current enterprise defenses, demonstrates their shortcomings, and offers practical solutions for improving security in the evolving threat landscape.
A Tale of Two Sides of 2FA
Explore the complexities of two-factor authentication, its implementation challenges, and best practices for enhanced security in applications. Learn from real-world examples to protect users effectively.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, ensuring robust defense against unauthorized access and data breaches.
The Internet of Pwned Things
Explore real-world IoT vulnerabilities, their exploitation, and impact. Learn industry best practices to prevent future incidents in this eye-opening talk on connected device security.
The Implementation and Practice of DevSecOps
Explore DevSecOps implementation, tools integration, and maturity models. Learn to shift security left, automate vulnerability detection, and enhance development team skills through practical training approaches.
How to Secure Your GitHub Actions
Learn to secure GitHub Actions workflows, manage access, protect secrets, and implement best practices for DevOps teams using CI/CD pipelines.
The Rise of Software Supply-Chain Attacks - How Secure is Your .NET Application
Explore software supply chain vulnerabilities in .NET applications, from infrastructure to CI/CD pipelines. Learn to identify and mitigate security risks across the development lifecycle.
Advanced Bluetooth Technology - Under the APIs
Explore advanced Bluetooth capabilities, including extended range, increased speed, and mesh networking. Dive into technical aspects like spread spectrum, adaptive frequency hopping, and data transfer rates.
How Not to Choke on a Big Old Project
Discover effective strategies for managing large legacy C++ projects, exploring DevSecOps, static and dynamic analysis, and quality control platforms to enhance code quality and security.
Proactive Security, Less Buzzword, More Action
Implementación de controles de seguridad proactivos alineados con las necesidades del negocio y los flujos de trabajo naturales, maximizando el impacto y minimizando riesgos mediante análisis cuidadoso.
25 Years of SSL - Secure(ish) Sockets Layer
Explore the 25-year evolution of web encryption, its challenges, recent advancements, and future prospects in securing online communication and privacy.
Running PHP Apps on .NET 5
Explore PeachPie: an open-source compiler bridging PHP and .NET, enabling interoperability and enhancing performance for large-scale web applications like WordPress and Laravel.
Demystifying Front-End Security
Explore modern front-end security challenges, attack techniques, and mitigation strategies. Learn why frameworks aren't foolproof and how to enhance your web applications' defenses against evolving threats.
The Rise of Software Supply-Chain Attacks - How Secure is Your .NET Application
Explore software supply chain vulnerabilities in .NET applications, from infrastructure to CI/CD pipelines. Learn to identify and mitigate security risks across the development lifecycle.
Let's Stop Blaming Our Users for Getting Hacked When It Is Our Problem to Solve
Explores FIDO2 as a superior authentication method, discussing its advantages over traditional 2FA and demonstrating how it can protect users from phishing attacks and enhance web application security.
Reducing Third-Party Security Risk in .NET Core Applications
Explore strategies to mitigate security risks from third-party dependencies in .NET Core, including compartmentalization and API review, to enhance application safety.
What Is a Software Security Initiative and Do I Need One
Explore building blocks for successful software security initiatives, balancing finding, fixing, and preventing issues. Learn strategies to enhance your AppSec program and avoid common pitfalls.
Who's Your User? OpenID from the Ground-Up
Explore OpenID for user authentication in distributed systems. Learn to integrate user identity across services without storing passwords, enhancing security and user experience.
Measuring DevSecOps - Building Metrics to Understand Effectiveness and Success
Explore key DevSecOps metrics to measure effectiveness, track essential security KPIs, and visualize results using Azure DevOps. Learn to demonstrate success and drive transformation in your development process.
Measuring DevSecOps - Building Metrics to Understand Effectiveness and Success
Explore essential DevSecOps metrics, learn to track and visualize security KPIs, and gain insights to drive transformation and demonstrate success in your development process.
Top Secret Cloud Native Security Lessons
Explore cloud-native security essentials for Kubernetes, Docker, and Istio. Learn real-world lessons, audit findings, and best practices to identify and mitigate potential vulnerabilities in your infrastructure.