Sigstore: Past, Present and Future Directions
Explore Sigstore's journey, impact on OSS code signing, and future plans. Learn about its adoption by major projects and integration efforts with package managers.
Security Champions Leaderboard - Building and Gamifying Security Culture
Gamifying security initiatives to foster a proactive security culture, recognizing champions, and improving overall developer engagement in organizational security practices.
Championing Security - Scaling Security at Every Level
Explore the concept of Security Champions to address enterprise security challenges. Learn best practices for implementing a program that empowers team members to promote and integrate security across the organization.
Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors
Explore protective measures against adversarial actors infiltrating AI supply chains. Learn to secure data, models, and pipelines, implement security controls, and mitigate risks in AI systems.
Break the Chain: Decentralized Solutions for Today's Web2.0 Privacy Problems
Explore decentralized technology standards for enhanced security and privacy in digital identity. Learn to implement consent-based data management systems that protect customer information and build trust.
Intersection of AI and Security - Traditional Sessions
Explore AI security challenges and solutions: CISO checklist, LLM security framework, and machine learning model serialization attacks. Gain insights from experts on safeguarding AI systems.
GRC Engineering - Bringing Governance, Risk, and Compliance to Your Git Repositories
Explore innovative approaches to integrate Governance, Risk, and Compliance directly into git repositories, revolutionizing how organizations handle compliance and security challenges.
Navigating the AI Frontier: Investing in AI in the Evolving Cyber Landscape
Explore AI's impact on cybersecurity through an investor's perspective, covering automation opportunities, ethical considerations, and risk management strategies for responsible AI deployment.
Ransomware and Backups: A Multi-Layered Defense Strategy
Explore multi-layered backup defense strategies against ransomware, including prevention, detection, analytics, and threat hunting techniques to protect critical data.
Insecurity Protocols - An Overview of Modern Authentication
Explore modern authentication protocols like OpenID Connect, SAML, and WebAuthn. Learn their strengths, vulnerabilities, and real-world security implications in this comprehensive overview.
Startup Security: From First Hire to Post-IPO - An Actionable Plan
Actionable strategies for building and scaling security in startups, from initial hire to post-IPO, with practical advice for thriving as a small security team.
Reinventing ETL for Detection and Response Teams
Explore innovative strategies for efficient, cost-effective data collection and log enrichment tailored to Detection and Response teams' unique requirements in cybersecurity.
OWASP API Security Project
Explore OWASP's API Security Project, focusing on best practices, common vulnerabilities, and strategies to enhance API protection in modern applications.
Back to the Future: Old Tricks Invading a New Attack Surface
Explore how classic hacking techniques are being adapted to exploit modern attack surfaces, revealing evolving cybersecurity challenges and defense strategies.
From Theory to Practice - Navigating the Challenges of Vulnerability Research
Explore practical challenges and strategies in vulnerability research, enhancing your skills to identify and mitigate security weaknesses in software systems.
Securing the Gateway and Mitigating Risks in LLM API Integration
Explore strategies for safeguarding LLM API integrations, addressing security vulnerabilities, and implementing robust risk mitigation measures in AI-powered applications.
OWASP Low-Code/No-Code Top 10 - LCNC Security Risks
Explore the top 10 security risks in low-code/no-code platforms with expert Michael Bargury, gaining insights to protect your applications and data in this rapidly evolving landscape.
OWASP Dep-scan: Analyzing Dependencies for Security Vulnerabilities
Explore OWASP Dep-scan, a powerful tool for identifying vulnerabilities in third-party dependencies, enhancing software security and streamlining the development process.
OWASP Coraza Web Application Firewalls Revisited
Explore OWASP Coraza's advanced features for securing web applications, including its architecture, rule language, and integration capabilities with popular web servers and frameworks.
XZ Backdoor - Navigating the Complexities of Supply Chain Attacks Detected by Accident
Explore the intricacies of supply chain attacks through the lens of the XZ Backdoor incident, uncovering detection methods and implications for cybersecurity professionals.
OWASP Cornucopia - Introduction to Application Security Card Game
Explore OWASP Cornucopia, a card game designed to help software developers identify security requirements in web applications, with expert insights from Johan Sydseter.