Malice in Chains - Supply Chain Attacks Using Machine Learning Models
Explore potential supply chain vulnerabilities in machine learning models and learn strategies to mitigate risks in AI-driven systems.
Exploiting Client-Side Path Traversal - CSRF Is Dead, Long Live CSRF
Uncover advanced techniques for exploiting client-side path traversal vulnerabilities, exploring the evolution of CSRF attacks and their modern implications for web security.
OWASP IoT Security Testing Guide (ISTG)
Comprehensive guide for IoT security testing, covering methodologies and best practices to identify vulnerabilities and enhance device protection in the interconnected world.
Security Champions and Experiments - Building Blocks for Cultural Change
Explore strategies for fostering a security-conscious culture through champions and experimental approaches, enhancing organizational resilience against cyber threats.
Paved Roads to Express RBAC in Threat Models
Learn effective techniques for incorporating Role-Based Access Control (RBAC) into threat modeling, enhancing security design and risk assessment for software systems.
Will Machine Learning Replace the WAF?
Explore the potential of machine learning to revolutionize web application firewalls, examining its capabilities, limitations, and impact on cybersecurity.
AI Package Hallucination - Spreading Malicious Packages Using Generative AI
Explore how generative AI can be exploited to create and spread malicious software packages, highlighting potential cybersecurity risks and defense strategies.
CrowdStrike IT Outage Explained - Kernel Mode Driver Analysis
Detailed analysis of CrowdStrike's IT outage from a Windows developer's perspective, focusing on kernel mode drivers and system vulnerabilities.
Complete CyberSecurity Roadmap 2024 - Beginner's Guide to Ethical Hacking
Comprehensive guide to becoming an ethical hacker, covering essential steps, skills, and resources for beginners entering the cybersecurity field in 2024.
Code Red: Navigating the Minefield of Security Programming Blunders
Explore infamous security breaches, learn from programming mishaps, and gain practical strategies to enhance cybersecurity in this dynamic session on secure coding practices.
Large Scale Private Learning on Data Streams and the Buffered Linear Toeplitz Operators
Innovative algorithm for privacy-preserving machine learning on data streams, introducing Buffered Linear Toeplitz operators for efficient noise generation in differentially private training.
Locally Private Histograms in All Privacy Regimes
Explore frequency estimation in data analysis, focusing on local differential privacy. Learn about algorithms, error bounds, and the intriguing low-privacy regime in histogram computation.
Stuxnet: The World's First Cyberweapon and Its Impact on Physical Infrastructure
Explores Stuxnet, the first cyberweapon that physically damaged Iranian nuclear centrifuges, its creation, operation, detection, and implications for future cyber warfare and security.
Cryptographic Governance - Software Supply Chain Security with CBOM
Explore software supply chain security using Cryptographic Bill of Materials (CBOM) for enhanced governance and risk mitigation in development processes.
OWASP SAMM - Interactive Introduction and Update
Explore OWASP SAMM, a framework for software assurance maturity modeling, with interactive insights and updates from industry experts.
Modern Application Security vs. GenAI Applications: Is Your AppSec Ready?
Explore the intersection of modern application security and generative AI, assessing readiness for emerging challenges in the evolving tech landscape.
OWASP Dependency Track - Fortifying the Software Supply Chain
Explore strategies to secure software supply chains using OWASP Dependency Track, a powerful tool for identifying and mitigating vulnerabilities in third-party components.
OWASP Privacy Toolkit - Privacy Awareness in the Digital Age
Explore digital privacy challenges and solutions with expert insights on data protection, online security, and personal information safeguarding in today's interconnected world.
5 AppSec Stories and What We Can Learn From Them
Explore real-world application security incidents and extract valuable lessons to enhance your cybersecurity practices and prevent similar vulnerabilities in your own systems.
The Forensic Frontier - Exploring Digital Forensics and Cybersecurity
Explore digital forensics' critical role in cybersecurity through an army veteran's journey. Gain insights into challenges, innovations, and the importance of indigenous solutions in this evolving field.
Preserving Anonymity in Data Collection - The Story of Differential Privacy
Explore differential privacy techniques for collecting user data while preserving anonymity. Learn key concepts, historical development, and potential applications in software telemetry.