Provable Security at AWS - Automated Reasoning for Cloud Security
Exploring AWS's provable security: Using automated reasoning to detect misconfigurations and provide absolute assurance in cloud security, protecting customers in an evolving threat landscape.
The Impact of Third-party Code on Android App Security
Exploring third-party library risks in Android apps, including outdated versions, vulnerabilities, and potential solutions for improved security and automatic patching.
Solving the Cloud Conundrum: Privacy, Trust and Accountability
Explore cloud security challenges, privacy concerns, and accountability in the digital age with industry experts. Gain insights on building trust, ensuring data protection, and navigating the evolving landscape of cloud technologies.
InfoSecurity 2015 - Building Data Protection in the Cloud
Explore cloud data protection strategies, including ownership, security measures, and emerging threats, with insights from Google's Director of Security.
Securing the Edge - Challenges and Strategies in Edge Computing
Explore edge computing security challenges across industries, examining architectures, use cases, and perceived risks based on the 2022 AT&T Cybersecurity Insights Report.
Fuzzers, Analyzers, and Other Gophers Insecticides - Session 1
Explore techniques for discovering vulnerabilities in Go code, including static analysis, fuzzing, and fault injection. Learn about common bugs, concurrency issues, and tools for automated vulnerability detection in Go applications.
How Security Can Keep Pace with Continuously Evolving Cloud-Native Applications
Explore dynamic security approaches for cloud-native apps, aligning with modern development lifecycles and infrastructure-as-code to ensure security evolves alongside rapid architectural changes.
Choosing the Right Static Code Analyzers Based on Hard Data
Explore unbiased methods to assess static code analyzers' performance, learn about a new website presenting research results, and discover how to choose the right tools for your development pipeline.
Cloudy with a Chance of Persistence - 2019
Explore cloud persistence techniques and their impact on security in modern computing environments.
Sexy Mobile App Attacks by Example - 2019
Comprehensive review of security flaws in Android and iOS apps, covering anonymized findings, vulnerabilities in open-source apps, and issues in government-mandated applications. Practical insights for mobile security enthusiasts.
The FaaS and the Curious - Exploring AWS Lambda Security in 2018
Explore AWS Lambda's attack surface, including function hijacking, cloud environment access, and runtime reverse engineering. Learn about FaaS security risks and potential exploits.
Orchestrating Security Tools with AWS Step Functions - 2018
Automate security reviews in CI/CD pipelines using AWS Step Functions. Learn to deploy serverless systems for integrating security tools like static analysis and container scanning into developer workflows.
Microservices Security Landscape - 2018
Comprehensive overview of microservices security, covering SDLC, DevOps, and application-level aspects. Addresses attack surface expansion, continuous delivery, deployment patterns, and inter-service communication security.
Poking Holes in the Cloud: Auditing AWS Security - 2018
Explore tools and techniques for penetration testing AWS-hosted systems, covering reconnaissance, exploitation, and key insights for enhancing cloud security.
Serverless Security: A Pragmatic Primer for Builders and Defenders - 2017
Explore serverless security challenges and practical approaches in software supply chain, delivery pipeline, data flow, and attack detection. Learn serverless basics and adoption patterns.
Architecting for Security in the Cloud - 2017
Discover strategies to identify and close security gaps in cloud applications, building robust architectures that can withstand Internet attacks while maintaining scalability and agility.
The Case for Runtime Protection
Runtime protection: inoculating apps against vulnerabilities without changing code. Explores how instrumentation hardens applications, making OWASP Top Ten harder to exploit. Discusses accuracy, performance, and impact on security culture.
TMI - The Kinds of Data Your Applications Are Leaking
Explore how web applications inadvertently leak sensitive information, and learn techniques to identify and prevent data exposure in various online services.
Manual JavaScript Analysis is a Bug - Automating Security Assessments for Modern Web Applications
Automate JavaScript security assessments: Learn efficient methods for analyzing modern web apps, focusing on key areas and streamlining the process for better results.
OWASP Top 10 Training - Part 4
Comprehensive exploration of OWASP Top 10 security vulnerabilities, offering insights and strategies for web application protection and risk mitigation.
OWASP Top 10 - Security Vulnerabilities A8 to A10 - 2017 Edition
Explore OWASP Top 10 vulnerabilities A8 to A10, focusing on insecure deserialization, using components with known vulnerabilities, and insufficient logging and monitoring.