Everything Useful I Learned About Software Security, I Learned at Microsoft
Discover key software security insights from Michael Howard's 18-year Microsoft journey, covering depreciation, friction reduction, network security, and practical strategies for robust development.
Catching Transparent Phish - Understanding and Detecting MITM Phishing Kits
Explore MITM phishing toolkits, their threat models, and detection methods. Learn about network-level analysis, classifiers, and countermeasures to enhance cybersecurity defenses.
Preventing Mobile App and API Abuse
Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.
Running at Light Speed - Cloud Native Security Patterns
Explore cloud-native security patterns, including container isolation, control plane hardening, and network segmentation. Learn about authentication, authorization, and secrets management in cloud environments.
Flying Above the Clouds - Securing Kubernetes
Explore Kubernetes security, from container isolation to authentication and authorization. Learn to build resilient cloud-native systems and deploy secure services in a distributed environment.
What's New in TLS 1.3
Explore TLS 1.3's security enhancements, new protocol handshakes, and 0-RTT resumption. Learn about potential deployment pitfalls and how to avoid them in this comprehensive overview of the latest TLS version.
A Tour of API Underprotection
Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.
Leveraging Cloud SDNs to Solve OWASP Top Ten
Explore cloud SDN implementation for OWASP Top Ten security, featuring virtualized controls, service chains, and open-source technologies. Learn practical solutions for web security in virtual networks.
Modern and Secure IAM for Modern Applications
Explore modern IAM strategies for enhanced application security, covering OpenID, JSON Web Tokens, SAML, and FIDO protocols, with practical insights and a demo.
Intelligent Internet of Things - Start Analyzing Your Global Device Data for Real-Time
Explore Google Cloud IoT's capabilities for managing global devices, extracting real-time insights, and leveraging AI and machine learning for enhanced IoT data analysis and decision-making.
Cilium - Container Security and Networking Using BPF and XDP
Explore Cilium's innovative use of BPF for container networking and security, covering performance, DDoS mitigation, and microservices protection in cloud-native environments.
Firewalls with NFtables
Comprehensive guide to implementing network security using NFtables, covering packet filtering, stateful firewalls, and practical rule configuration for effective protection against cyber threats.
Identifying the Scan and Attack Infrastructure Behind Amplification DDoS Attacks
Explore techniques to identify infrastructure behind amplification DDoS attacks, including scanning, honeypots, and trilateration methods for improved cybersecurity defenses.
Host of Troubles - Multiple Host Ambiguities in HTTP Implementations
Explores HTTP host ambiguities in implementations, revealing vulnerabilities in caching, firewalls, and WAFs. Presents attacks exploiting these issues and discusses prevalence and mitigation strategies.
A Unilateral-to-Mutual Authentication Compiler for Key Exchange - with Applications to Client Authentication in TLS 1.3
Explore unilateral-to-mutual authentication in key exchange, focusing on client authentication in TLS 1.3. Learn about the SIGMAC compiler, security definitions, and post-handshake protocols.
On the Practical - In-Security of 64-bit Block Ciphers - Collision Attacks on HTTP over TLS and OpenVPN
Explore practical security vulnerabilities in 64-bit block ciphers, focusing on collision attacks in HTTP over TLS and OpenVPN. Learn about countermeasures and implications for network security.
A Systematic Analysis of the Juniper Dual EC Incident
Systematic analysis of Juniper's Dual EC cryptographic incident, exploring vulnerabilities, attack methods, and implications for network security and encryption standards.
The Golden Ticket - Docker and High Security Microservices
Explore Docker security for microservices: container design, network protection, secrets management. Learn practical techniques for building robust, secure architectures using Docker's latest features.
Deep Dive into Managing and Monitoring Your Azure Networks
Comprehensive exploration of Azure network management, covering topologies, security, DNS resolution, monitoring, and troubleshooting, with practical demos and best practices for efficient cloud networking.
Endpoint Security Management with Microsoft Endpoint Manager
Explore cross-platform endpoint security and management for Zero Trust, covering Conditional Access, Device Compliance, Network Access Control, and Defender for Endpoint.
Ask the Experts - Azure Networking
Interact with Azure Networking experts to learn about latest announcements, ask questions, and provide feedback on topics like load balancing, routing, and connectivity options.