Software Supply Chain Threat Landscapes - A Moving Target
Explore evolving software supply chain threats and learn strategies to protect your organization from vulnerabilities, malicious attacks, and emerging risks in the digital ecosystem.
Opening Doors with JSON Web Tokens - Securing IoT Access
Explore secure IoT door access using JSON Web Tokens, NFC, and mobile apps. Learn innovative techniques for remote authorization without direct internet connection, balancing convenience and safety.
Security Champions: Introducing Them in Your Organization
Discover how to implement Security Champions in your organization, enhancing developer readiness for security challenges and secure coding practices. Learn about supporting OWASP tools and guidance.
Authenticating Single Page Apps Using JSON Web Tokens
Learn to implement secure authentication in single page apps using OpenID Connect and JSON Web Tokens, enhancing user experience and application security.
The Future of Authentication - WebAuthn with PHP
Explore WebAuthn, a passwordless authentication standard, and learn how to implement it using PHP and JavaScript for enhanced security and user experience.
Practical Security in Web Applications
Explore effective methods to identify and avoid common security pitfalls in web applications. Learn to build secure enterprise web presence and protect against vulnerabilities.
Dynamic Key Managed PowerPC Guest Secure Boot
Learn about dynamic key secure boot for Power LPARs, addressing static key limitations and exploring new mechanisms for enhanced boot-level security on PowerPC systems.
Zero Trust Best Practices in Government and Federal Industries
Explore key components and best practices for implementing zero trust security in government and federal industries, focusing on comprehensive protection strategies and advanced technologies.
Introduction to Threat Modeling in the Cloud
Learn essential techniques for identifying and mitigating security risks in cloud environments through threat modeling, with practical insights from the Argo Project Threat Model.
How Do You Know You're Done After a Security Fix - Leveraging SBOM Data
Explore approaches for leveraging SBOM data to improve automation and confidence in safety analysis after applying vulnerability fixes in systems with safety considerations.
Use AI to Turn Data Into Actionable Information With PagerDuty and AWS
Discover how PagerDuty and AWS leverage AI to transform data into actionable insights, streamline incident response, reduce noise, and improve triage efficiency in real-time.
Secure Boot - What Is It and Do I Need It?
Explore secure boot in IoT: its components, use cases, threats it prevents, and implementation status. Learn key elements for supporting secure boot in connected devices.
Implementing and Validating Linux Cyber Security Requirements: SEAPATH Case Study
Explore cyber security implementation in embedded Linux systems, focusing on SEAPATH project for critical electrical substations. Compare tools and methods for security compliance validation.
OTA Device Firmware Updates Without Compromise
Explore a novel approach to Over-The-Air Device Firmware Updates that operates externally, offering greater flexibility and stability across various platforms and languages.
HashiCorp's Multicloud Zero Trust Platform
Explore HashiCorp's innovative platform for implementing zero trust security across multicloud environments, enhancing data protection and access control.
The Supply Chain Conundrum: Why Traditional Application Security Is Failing Us
Explore why traditional app security falls short in protecting against supply chain attacks. Learn proactive, attacker-centric approaches and best practices to safeguard your software development process.
The First 200 Milliseconds of HTTPS
Explore the intricate process of HTTPS connections, from certificates to cipher suites. Gain insights into the hidden mechanisms that ensure secure web browsing and understand potential vulnerabilities.
How to Rob a Bank - Modern Hacking Techniques and Security Defenses
Practical demonstration of modern hacking techniques and defense strategies through a simulated bank robbery, offering insights into targeted attacks and organizational preparedness.
SMT Solvers in IT Security - Deobfuscating Binary Code with Logic
Explore SMT solvers for deobfuscating binary code in IT security. Learn practical applications, theoretical limitations, and solutions for enhancing malware analysis and vulnerability identification.
Are Your VoLTE and VoWiFi Calls Secure - Security Analysis of Voice Protocols
Explore security vulnerabilities in VoLTE and VoWiFi, including sniffing attacks, key extraction, and SIP header injections. Learn about potential risks and mitigation strategies for modern voice communication technologies.
Automation Attacks at Scale - Detecting and Mitigating Distributed Threats
Explore automation attacks plaguing various industries, their detection methodologies, and real-world examples of distributed infrastructure used by attackers to launch and monetize these widely distributed, difficult-to-detect threats.