Balancing Privacy - Leveraging Privacy Budgets for Privacy-Enhancing Technologies
Explore privacy budgets in PETs, balancing input protection with output privacy. Learn metrics, guidelines, and strategies for compliance and valuable data insights.
Beyond Quick Cash: Rethinking Bug Bounties for Greater Impact
Explore the evolution of bug bounty hunting, focusing on strategic approaches to uncover chainable vulnerabilities and create greater impact in cybersecurity.
LLM Privacy Paradox: Balancing Data Utility with Security - BSidesSF 2024
Explore the balance between data utility and security in LLM fine-tuning, addressing concerns about potential sensitive data leaks and privacy risks in specialized AI models.
Infrastructure as Code, Automation, and Testing in Detection Engineering
Explore detection-as-code for security teams: automate, test, and deploy robust detection systems using Azure DevOps, Microsoft Sentinel, and Defender suite. Improve effectiveness and maintain control across environments.
Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development and usage.
Creating On-Call Heroes: Strategies for Effective On-Call Practices
Aprenda estratégias eficazes para práticas de plantão, desde prevenção e triagem até mitigação e liderança. Desenvolva uma cultura de suporte e evite o esgotamento da equipe.
Cloud Network Segmentation in Pursuit of Zero Trust
Explore cloud network segmentation and Zero Trust principles, focusing on Transit Gateway implementation, hub-and-spoke models, and design considerations for secure, scalable architectures.
Thread-Level Attack-Surface Reduction for Enhanced Security
Explore thread-level attack-surface reduction, a dynamic approach to eliminate unused code on a thread level, significantly reducing ROP gadgets and enhancing security in multi-threaded applications.
Secure Calling Conventions for CHERI Capability Machines in Practice - Work in Progress
Explore secure calling conventions for CHERI capability machines, focusing on temporal memory safety and stack frame encapsulation. Evaluate performance impact and compatibility.
Understanding, Replicating, and Generating PCAP for OpenSSH XZ Utils Backdoor Issue (CVE-2024-3094)
Explore CVE-2024-3094: Understand the xz library vulnerability, replicate it in a controlled environment, and generate PCAPs for analysis. Enhance your cybersecurity skills.
The Hunt for CVE-2023-0286 - Replicating OpenSSL's Latest Vulnerability
Replicate CVE-2023-0286 in OpenSSL, learn to write a libfuzzer harness, and explore vulnerability research techniques for enhanced security awareness and threat prevention.
Automating CVE PCAP Generation with Nuclei
Automate Nuclei scanning and PCAP generation for CVEs using Python. Learn to configure targeted scans and create scripts for efficient vulnerability analysis.
Unlocking the Power of Nuclei: A Comprehensive Guide - Part 1
Master Nuclei's powerful capabilities for identifying security vulnerabilities. Learn to integrate this user-friendly tool into your penetration testing and vulnerability assessment processes.
Using Vulhub for Dockerized Vulnerability Replication
Explore Vulhub for hands-on vulnerability replication. Learn to set up Docker environments, simulate Heartbleed and Log4j vulnerabilities, and gain practical cybersecurity experience.
Securing Mobile App Secrets: Preventing Credential Leaks in Android Applications
Explore how mobile apps leak sensitive credentials, analyze real-life breaches, and learn actionable steps to prevent secrets from being exposed in source code and compiled applications.
Copy Protection via the Game I/O Connector - Reverse Engineering Dongles
Explore rare copy protection dongles, their purpose, and reverse engineering for AppleWin emulation with Tom Charlesworth.
Zero Trust Security with IoT
Explore Zero Trust Security principles for IoT devices, addressing challenges and implementing robust protection strategies in the interconnected digital landscape.
Debugging Schrodinger's App - DevSecOps Strategies
Explore quantum computing principles applied to debugging complex software systems, enhancing problem-solving skills for modern developers.
DevSecOps for AI: Introducing MLSecOps for Software 2.0
Explore MLSecOps for AI-driven software development, addressing security challenges and best practices in the evolving landscape of Software 2.0.
How HMRC Digital Secures Services at Scale
Discover HMRC Digital's strategies for securing large-scale services, exploring innovative approaches to DevSecOps implementation and risk management in digital tax systems.
Open-Source Vulnerability Management: Use the Source - DevSecOps 2022
Explore open-source vulnerability management techniques using source code analysis for effective security practices in DevSecOps environments.