Passive Fingerprinting of HTTP/2 Clients
Explore HTTP/2 protocol nuances for passive client fingerprinting. Learn about implementation differences, potential use cases, and observed attacks on Akamai's platform.
Combining Security Risks of Native and Web Development in Hybrid Apps - AppSec EU 2017
Explore security risks in hybrid app development, combining native and web technologies. Learn defensive programming and testing strategies for secure cross-platform mobile applications.
DNS Hijacking Using Cloud Providers: No Verification Needed - AppSec EU 2017
Explore advanced domain hijacking techniques, including undisclosed methods, to understand vulnerabilities in DNS providers and cloud services. Learn to identify and mitigate risks beyond common subdomain takeover scenarios.
Machine Learning vs. Cryptocoin Miners
Explore machine learning techniques to detect and combat cryptocurrency mining malware, enhancing cybersecurity defenses against evolving digital threats.
Threat Model-as-Code: Integrating Security into the Software Development Lifecycle
Integrating threat modeling into software development lifecycle using "Automaton" framework, enabling actionable outputs and automated security testing for improved product security.
Chromebooks and Network Motes: Enforcing Security Posture from Device to Cloud
Explore innovative security strategies using Chromebooks and network motes, balancing developer productivity with robust data protection in resource-constrained environments.
Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD
Extensive analysis of malicious domain registrations in .eu TLD, revealing cybercriminal tactics and campaign patterns. Insights into automated processes and operational aspects of large-scale malicious activities.
Embedded Systems Security - Common Threats and Best Practices
Explore embedded system security threats, proactive controls, and best practices to protect interconnected devices from vulnerabilities and potential DDoS attacks.
Essential TLS Hardening for Better Web Security
Explore essential TLS hardening techniques for enhanced web security with Justin Mayer, founder of Monitorial.com. Learn practical strategies to identify and address potential vulnerabilities in your web applications.
HTTPS Security Headers: HSTS, TLS, HPKP, and CSP Implementation - APPSEC CA 2017
Comprehensive guide to implementing HTTPS using HSTS, TLS, HPKP, and CSP. Learn best practices for secure web communication from Salesforce security experts.
Webhooks Hookups - Abusing API Developers
Explore the security risks of Webhooks in API development, including potential vulnerabilities, real-world examples, and preventive measures. Learn about a new toolkit for auditing Webhook exposure.
Passive Fingerprinting of HTTP/2 Clients
Explore HTTP/2 protocol nuances for passive client fingerprinting. Learn about implementation differences, potential use cases, and security implications in this comprehensive overview.
Secure Coding Lessons for Mobile Apps - Insights from the Trenches
Explore common mobile app coding pitfalls, their real-world impacts, and learn effective strategies to enhance security. Includes demonstrations of attacker techniques and protective code samples.
Preventing Subdomain Takeover with OWASP Domain Protect
Learn to prevent subdomain takeovers using OWASP Domain Protect. Enhance your application security knowledge with practical strategies and tools.
OWASP Coraza: The Way to WAF in 2023
Explore OWASP Coraza, a cutting-edge Web Application Firewall (WAF) solution, and learn how it enhances web security in 2023 through advanced features and implementation strategies.
Managing Risk in the Age of Cyberterrorism
Explore evolving cyberterrorism threats and strategies for managing risks to critical infrastructure, personal data, and intellectual property in our interconnected world.
Cilium - Network and Application Security with BPF and XDP
Deep dive into BPF technology for application and network security, exploring Cilium's use in distributed systems with Docker for simplified operations and troubleshooting.
A Moment of Reckoning - Understanding the Russian Cyber Attack
Explore the severe 2020 Russian cyber infiltration of US federal agencies and corporations, examining cybersecurity failures, potential risks, and necessary actions moving forward.
How 2020 Changed the Internet - Insights from Cloudflare
Explore how 2020 transformed online habits and the future of the Internet with Cloudflare's COO. Gain insights on cybersecurity, cloud migration, and global digital trends from a leading industry expert.
Exposing Security Flaws in Trading Technologies
Uncovers vulnerabilities in popular trading platforms, highlighting risks in electronic trading. Discusses security gaps in websites, desktop apps, and mobile apps used for stock and cryptocurrency trading.
OWASP Amass Project: DNS Enumeration and Network Mapping
Explore DNS enumeration and network mapping with OWASP Amass, a powerful tool for uncovering organizational internet presence and exposure using multiple data sources.