There's Somebody in My Package Manager - Security Risks and Mitigation
Explore package manager security risks and learn strategies to protect against supply chain attacks in software development.
Build Cyber-Awareness in Platform Development Teams
Enhance platform development teams' cyber-awareness through secure coding, network segmentation, and incident response planning. Foster a security-conscious culture for robust cybersecurity practices.
Implementing Email Attachment Security
Explore email attachment security implementation using pyminigip and AWS integration. Learn risks, solutions, and benefits for enhanced protection in business scenarios.
Securing the Software Factory
Explore strategies for securing the software development lifecycle, from code to deployment, enhancing overall application security and resilience.
Varieties of Incident Response - Examining Approaches and Frameworks
Explore diverse incident response approaches, evaluating benefits and drawbacks to optimize your team's process and enhance effectiveness during critical situations.
Building Trust in Open Networks - TLS Implementation Challenges
Explore challenges and solutions in implementing TLS authenticity for Erlang/OTP, focusing on privacy, integrity, and security in open networks.
Introduction to Red Teaming
Explore red teaming origins, roles, and key differences from penetration testing in offensive cybersecurity. Gain insights for beginners and experienced professionals alike.
Building Dynamic System Call Sandbox with Partial Order Analysis
Explore dynamic system call sandboxing using partial order analysis to enhance OS security. Learn how to restrict unnecessary system calls and reduce attack surfaces in program execution.
Towards Better Semantics Exploration for Browser Fuzzing
Explore innovative browser fuzzing techniques using production-context sensitive grammars for enhanced semantic coverage and bug detection in Chrome, Safari, and Firefox.
From Static to Dynamic Access Control Policies via Attribute-Based Category Mining
Explore attribute-based category mining for dynamic access control policies, transitioning from static approaches in cybersecurity.
Secure RDTs: Enforcing Access Control Policies for Offline Available JSON Data
Explore Secure RDTs for enforcing role-based access control on offline-available JSON data, enhancing security in applications with intermittent network connectivity.
Graceful Under Pressure: Prioritizing Shutdown to Protect Your Data in Embedded Systems - Even When the Power Flickers
Explore strategies for prioritizing shutdown in embedded systems to safeguard data during power fluctuations and ensure graceful system behavior under pressure.
DevSecOps Transformation at Speed and Scale Using Tekton
Standardize CI/CD security automation, centralize platform operations, and prevent software vulnerabilities using Tekton as an open-source orchestrator with integrated scanning tools and continuous compliance.
The Critical Path to Implant Backdoors and Potential Mitigation Techniques: Learnings from XZ Utils
Analyze the critical attack path of XZ Utils backdoor and explore mitigation strategies for supply-chain attacks in open-source software.
SLUB Internals for Exploit Developers
Explore SLUB allocator internals and slab memory shaping strategies for Linux kernel exploit development. Gain insights into controlling memory corruption and implementing effective exploit techniques.
The Right to Be Forgotten - Personal Information Privacy and Digital Rights
Explore the concept of personal information as private property and the importance of the "right to be forgotten" in the digital age.
Quantitative Robustness for Vulnerability Assessment
Explore quantitative robust reachability for measuring bug triggering difficulty in software security. Learn about QRSE and functional E-MAJSAT for improved vulnerability assessment.
Completeness Thresholds for Memory Safety of Array Traversing Programs
Explore completeness thresholds for bounded memory safety proofs in array-traversing programs. Learn about reducing unbounded proofs to bounded ones and potential research avenues.
Metasploit for Detecting Null Sessions and Exploiting Samba Server (SMB)
Explore SMB protocol, enumerate vulnerable Linux machines, and exploit Samba servers using Metasploit Framework's samba_symlink_traversal module. Gain insights into SMB security risks.
Automated DevSecOps Maturity Assessment
Explore automated DevSecOps maturity assessment techniques to enhance security integration and streamline development processes for improved efficiency and risk management.
Why Put Security in DevOps - and How
Explore integrating security into DevOps practices, understanding its importance and implementation strategies for enhanced software development.