Black-Box Approximate Taint Tracking by Utilizing Data Partitioning
Innovative black-box taint tracking system for detecting user input data injection in commands and SQL queries, offering cost-effective and performant runtime protection without code modifications.
iGoat: A Self-Learning Tool for iOS App Security Testing
Learn iOS app security through hands-on exercises with iGoat, an open-source tool for developers and pentesters. Explore vulnerabilities, exploit techniques, and implement fixes in a safe environment.
A Static Tainting Analysis Method for Aspect-Oriented Programs
Introduces a new method for detecting vulnerabilities in aspect-oriented web applications, focusing on static tainting analysis to improve security in languages like AspectJ.
The Evil Friend in Your Browser - Browser Extension Security Risks
Explore the security risks of browser extensions, their potential for data breaches, and the limitations of current security models. Learn about threat analysis and user protection strategies.
Introducing the OWASP ModSecurity Core Rule Set 3.0 - AppSec EU 2017
Explore OWASP ModSecurity Core Rule Set 3.0: installation, key concepts, and handling false positives for effective web application firewall protection against common attacks.
Stealth Authentication: Preventing Information Leaks in Web Application Security - APPSEC CA 2017
Explore stealth authentication techniques to enhance web application security by preventing information leaks during the authentication process.
Collaborative Project Updates: ODP, CNCF, OpenSwitch and CII
Collaborative project updates on ODP, CNCF, OpenSwitch, and CII, featuring insights from industry leaders on open-source initiatives, cloud computing, and infrastructure security advancements.
State of the Union - The Linux Foundation
Explore the latest trends in open source, cloud computing, and mobile technology with insights on security, sustainability, and innovation from The Linux Foundation's executive director.
HTTP Desync Attacks - Smashing Into The Cell Next Door
Explore HTTP desync attacks and their impact on web security, learning techniques to exploit vulnerabilities and breach neighboring systems.
How Scripting in ZAP Can Bridge the Gap Between Dev Teams and Security
Learn to bridge dev and security teams using ZAP scripting. Explore opportunities, overcome obstacles, and implement effective testing strategies for enhanced application security.
Attacking AWS: The Full Cyber Kill Chain
Comprehensive exploration of AWS vulnerabilities and attack strategies, covering the entire cyber kill chain for enhanced cloud security awareness.
Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
Testing iOS Apps without Jailbreak - Penetration Testing Techniques
Learn techniques for penetration testing iOS apps without jailbreaking, including live demos on accessing protected resources on the latest iOS version. Ideal for pentesters facing jailbreak limitations.
Black Clouds and Silver Linings in Node.js Security
Explore Node.js security challenges and mitigation strategies. Learn from real-world incidents to build secure JavaScript applications and understand ecosystem responsibilities.
Defending Cloud Infrastructures with Cloud Security Suite
Comprehensive tool for auditing AWS/GCP/Azure security, combining open-source capabilities with custom checks to enhance cloud infrastructure protection and address human error risks.
Securing Node.js and JavaScript
Explore common security vulnerabilities in Node.js and JavaScript ecosystems, and learn effective strategies to protect your applications from potential attacks.
New Web Platform Security Features to Protect Modern Web Applications
Explore modern web browser security features to protect against XSS, CSRF, and clickjacking. Learn about CSP3, Trusted Types, Fetch Metadata Request Headers, CORP, and COOP for enhanced application security.
NOSQL Web Application Vulnerabilities and Mitigation
Explore NOSQL database vulnerabilities, including injection methods and CSRF, and learn mitigation strategies for enhanced security in web applications.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent
Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.
How I Could Have Stolen Your Photos From Google
Uncover a critical security vulnerability in Google Photos and learn how it could have compromised user privacy. Gain insights into responsible disclosure and ethical hacking practices.