Writing Secure Software - Applying Security Principles in Practice
Practical application of security principles in web app development, showcasing architectural decisions for enhanced security using a blog as an example.
Top Five Security Tips for Organizations
Discover five essential security tips for organizations, covering strong authentication, minimalism, updates, backup isolation, and staying informed on threats and best practices.
Secure Deployments at Scale on AWS - PlatformCon 2023
Learn optimal DevSecOps pipeline architecture for secure, fast deployments at scale on AWS. Explore multi-account structures, pipeline layering, shift-left security, and least privilege deployment roles.
RBAC to the Future: Untangling Authorization in Kubernetes
Explore Kubernetes RBAC essentials, from its inner workings to enterprise-level strategies. Learn to design, automate, and monitor least-privilege configurations for enhanced security and efficiency.
Orchestrating Least Privilege in Docker Environments
Explore Docker's approach to orchestrating least privilege, enhancing security in distributed applications through efficient privilege management and access control.
Kubernetes Authentication and Authorization at Robinhood - Lessons from Reductions, Migrations, and Designing Automation
Explore Robinhood's journey in implementing least privilege for Kubernetes RBAC, including challenges, solutions, and lessons learned in managing authentication and authorization.
PAM Maturity From Zero Trust To Least Privilege
Panel discussion on PAM maturity, exploring the journey from zero trust to least privilege. Industry experts share insights on implementing effective privileged access management strategies in modern cybersecurity landscapes.
Demystifying Zero Trust - DefCamp - 2021
Explore Zero Trust security: its principles, implementation, and impact on cybersecurity. Learn about identity governance, least privilege, and maturity models for effective protection against modern threats.
Next Gen Application Proxies Protect Against The Latest Attacks & Intrusions
Explore advanced application proxies for enhanced cybersecurity, covering application awareness, privilege management, stateful inspection, and threat detection techniques.
Hardening Windows 8 Apps for the Windows Store
Explore security considerations for Windows 8 Store apps, covering HTML5, backend services, cloud computing, and WinRT to ensure robust and privacy-focused mobile development.
Got Software - Need a Security Test Plan - Got You Covered
Learn to create a comprehensive security test plan for software, covering OAuth, layered security, and best practices for various security aspects.
Using Behavior to Protect Cloud Servers
Explore cloud server protection through user behavior analysis, covering challenges, threats, and innovative solutions like SSH proxies and machine learning-based classification systems.
Modern Least Privilege with DevSecOps
Explore modern least privilege principles in DevSecOps, focusing on platform teams, continuous delivery, and scaling to zero for enhanced security and efficiency in cloud-native environments.
Privacy Engineering: Not Just for Privacy Engineers
Explore Uber's collaborative approach to privacy engineering, blending data analysis with robust privacy measures to enhance services while ensuring regulatory compliance and user protection.
Understanding and Using SUDO in Windows - Command Line Elevations
Explore Windows' new SUDO capability for seamless on-demand elevation of privileged commands, enhancing security and user experience in command-line environments.
Least Privilege: Moving Beyond Default Service Accounts
Explore balancing developer flexibility and security by moving beyond default service accounts, implementing custom IAM roles, and automating alerts for least privilege.