Managing the Code Quality of Your Project - Leave the Past Behind - Focus on New Code
Explore the "Clean as you code" approach for managing code quality in legacy projects, focusing on recent changes to improve deliverables incrementally while maintaining productivity.
Using Python to Manage Software Bill of Materials
Learn to create and manage Software Bill of Materials (SBOMs) using Python, enhancing software security and compliance tracking in complex development environments.
Common Python Mistakes with Kubernetes - How They Can Cause Vulnerabilities and How to Solve Them
Explore common Python vulnerabilities in Kubernetes deployments, their potential impacts, and effective mitigation strategies using tools like Falco, TUF, Open Policy Agent, and Bandit.
Online Voting System Used for Primary Elections for the French Presidential - Must Be Secure Right?
Analyse critique du système de vote en ligne Neovote utilisé pour les élections primaires présidentielles françaises, examinant ses revendications de sécurité et ses vulnérabilités potentielles.
Let's Talk About JWT
Explore JWT's history, structure, and security implications. Learn to create and validate tokens using PyJWT, understand access vs. ID tokens, and discover best practices for safe implementation.
Writing Secure Code in Python
Learn to identify and prevent security vulnerabilities in Python, including issues with eval(), pickle, and pip. Discover cryptographically-secure randomness and code auditing techniques for maintaining application security.
Tales of Python Security
Explore recent CPython security issues, learn responsible reporting, and discover best practices for protection and response in this informative session on Python ecosystem vulnerabilities.
Implementing PEP 458 to Secure PyPI Downloads
Explore efforts to secure PyPI downloads through PEP 458 implementation. Learn about software repository attacks, The Update Framework, and the integration process with PyPI/Warehouse.
pip install malware
Live demonstration of creating and installing malware from PyPI, highlighting security risks in package dependencies and emphasizing the importance of vigilance when using external libraries.
The Digital State of the European Union
Explore the challenges and current state of EU digital services, including identity, cross-border access, and open source support. Gain insights into normative and technical issues affecting UX, cybersecurity, and maintainability.
Don't Panic! A Developer's Guide to Security
Learn to enhance project security using industry standards like the OWASP DevSecOps Maturity Model. Gain practical insights for developers to systematically improve security without being an expert.
Face Off - Brute-Force Attack on Biometrical Databases
Explore facial recognition security, understand its inner workings, and witness a sophisticated brute-force attack on a biometric database built with Dlib-python-library. Surprising results await!
PEP 458 - A Solution Not Only for PyPI
Explore PEP 458's cryptographic signing for PyPI and its broader applications in securing software supply chains, including the Repository Service for TUF project and its potential benefits.
Ocultando dados com SQL Server 2016
Aprenda técnicas avançadas de ocultação de dados no SQL Server 2016, melhorando a segurança e privacidade das informações em seus bancos de dados.
Hacking Exposé Too - Just How Transparent is TDE?
Explore Transparent Data Encryption (TDE) in SQL Server, its implementation, and potential vulnerabilities through hands-on demonstrations and practical insights.
Protecting Your Data with Encryption
Explore SQL Server's encryption methods to safeguard data from hackers. Learn about hashes, cell-level, database-level, and backup encryption, as well as key protection strategies.
SQL Server 2014 Backup Encryption
Explore SQL Server 2014's backup encryption features, enhancing data security and protection for your database backups.
SQL Server 2016 Hero Features in Action - Full Lifecycle of Financial Data
Explore SQL Server 2016's hero features, including record-breaking performance, enhanced availability, in-memory OLTP, and secure data protection, with practical applications in financial data management.
Hackers Move Away, We Are Always Encrypted - Data Security
Explore Always Encrypted in SQL Server, its implementation, advantages, and comparison with other security technologies. Learn about key management roles and RDBMS security features across editions.
Data Compliance Worldwide - The New World of Data Privacy
Explore global data privacy legislation, common themes, and 10 steps for worldwide compliance. Learn about GDPR, US laws, and essential practices for data protection and security.
A Techie's View on Meeting Compliance - The New World of Data Privacy
Explore technical solutions for data privacy compliance, including controls, data classification, encryption, and SQL Server options. Learn to meet regulatory requirements effectively.