Practical Dynamic Application Security Testing within an Enterprise
Practical implementation of dynamic application security testing in enterprise DevOps, showcasing CI/CD pipeline integration and large-scale scanning methods for enhanced security coverage.
Moving Fast and Securing Things
Discover how Slack balances rapid development with robust security through an innovative Secure Development Lifecycle process, featuring self-service tools and chat-based workflows that foster a security mindset among developers.
Secure Product Lifecycle as a Service
Learn to design, implement, and scale a Secure Product Lifecycle (SPLC) program using automation and security ambassadors. Gain insights from Adobe's successful approach to integrating security into software development.
Attribute Based Access Control - Why, What, How
Explore digital identity trends, ABAC implementation, and data protection in finance. Learn from ABNAMRO's experience with Attribute Based Access Control and its impact on security and regulation compliance.
A Series of Unfortunate Events - Where Malware Meets Murphy
Exploring a real-world ransomware incident, its challenges, and unexpected failures in security infrastructure and recovery processes. Learn valuable lessons for better incident preparedness.
Common REST API Security Pitfalls
Explore common REST API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for robust, future-proof applications.
Don't Trust the DOM - Bypassing XSS Mitigations via Script Gadgets
Explores novel XSS attack technique using script gadgets to bypass mitigations, demonstrating vulnerabilities in modern JavaScript libraries and advocating for preventive security measures.
Test Driven Security in the DevOps Pipeline
Learn to implement Test Driven Security in DevOps, focusing on baseline controls, continuous testing, and preventing common vulnerabilities through specific, actionable security practices.
Core Rule Set for the Masses
Insights on fine-tuning ModSecurity Core Rule Set for large-scale deployments, reducing false positives, and optimizing web application firewall performance.
Beyond Takeover - Attacker's In. Now What?
Explore the aftermath of phishing attacks through a unique research perspective, uncovering attacker behaviors, account takeover dynamics, and essential cybersecurity insights for organizations.
Handling of Security Requirements in Software Development Lifecycle
Explore a unified process for handling security requirements in large companies, focusing on SecurityRAT tool for automated requirement management and issue tracking integration.
When Molehill Vulnerabilities Become Mountainous Exploits
Explore how seemingly minor vulnerabilities can escalate into major security threats through live demonstrations, emphasizing the importance of comprehensive code scanning and proactive security measures.
An Overview of API Underprotection
Explores API security challenges, threats, and emerging technologies. Covers OAuth2, API keys, mobile app security, TLS pinning, and advanced techniques like app hardening and software attestation.
How to Find and Prevent Entire Classes of Security Vulnerabilities
Learn techniques to identify and prevent security vulnerabilities through variant analysis, code navigation, and automation, using real-world examples and practical strategies.
Being Powerful While Powerless - Elevating Security By Leading Without Authority
Learn strategies for elevating security without formal authority, including technical approaches and cultural tactics to influence stakeholders and drive positive change in organizational security practices.
The Security We Need - Designing Usable IoT Security
Explore usable IoT security design principles to create user-friendly, effective protection. Learn strategies for clear communication, secure defaults, and seamless integration of security measures.
How Do JavaScript Frameworks Impact The Security Of Applications
Explore JavaScript frameworks' impact on application security, analyzing mitigation levels, case studies, and CSRF protection across popular frameworks like Meteor.
Modern and Secure IAM for Modern Applications
Explore modern IAM strategies for enhanced application security, covering OpenID, JSON Web Tokens, SAML, and FIDO protocols, with practical insights and a demo.
Controlled Mayhem With Cloud Native Security Pipelines
Explore cloud-native security pipelines, comparing traditional and modern approaches, while addressing challenges in container orchestration, access control, and CI/CD processes.
The Woman Who Squashed Terrorists - When An Embassy Gets Hacked
Discover how a cybersecurity expert thwarted a terrorist hack on an embassy, exploring the incident's origins, diplomatic implications, and crucial lessons for global security.
Security Vulnerabilities Decomposition - Another Way to Look at Vulnerabilities
Explore security vulnerabilities decomposition, focusing on SQL injection, secure data handling, and design patterns for payment gateways and single sign-on. Learn practical security controls for secure development.