Securing Sensitive Data: A Strange Game - PG02
Explore strategies for securing sensitive data, including encryption, isolation, and PCI compliance, while addressing human factors and potential drawbacks.
PCI and Crypto: The Good, The Bad, and The Frankly Ugly - v12
Explore the complexities of PCI compliance and cryptography, examining their strengths, weaknesses, and unexpected challenges in modern cybersecurity landscapes.
Scaling Content Security Policy: Enterprise Compliance and Third-Party Resource Management
Learn to implement Content Security Policy and monitor web resources at scale, addressing supply chain attacks and PCI requirements for enhanced frontend security in enterprise applications.
Encryption and Masking for Sensitive Apache Spark Analytics Addressing CCPA and Governance
Practical methods for balancing data encryption and analytics in Apache Spark, addressing CCPA and governance requirements while maintaining analytical value.
SMB Security Risk Management Framework for Identifying Top 10 Risks - BSidesRI 2013
Learn to identify top 10 risks using SMB SRMF methodology. Explore data breaches, risk management frameworks, PCI compliance, and cost-effective risk assessment strategies for small businesses.
The 2013 OWASP Top 10 - Understanding Web Application Security Risks
Comprehensive overview of OWASP Top 10 2013, covering changes, risks, and mitigation strategies for web application security. Essential for developers and security professionals.
Public Cloud PCI Compliance - Challenges and Solutions
Explore cloud security challenges, PCI compliance in public clouds, and innovative approaches to enhance security posture and meet regulatory requirements.
Key Management 101 - DEKs, KEKs, and Credentials Living Together
Explore key management essentials, including types of keys, usage, and tools. Learn practical advice for PCI compliance and securing sensitive data in cloud environments.
Costs of Coding to Compliance
Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.
Don't Have a Meltdown - Practical Steps for Defending Your Applications
Practical steps to defend applications against common attacks, covering authentication, injection, updates, sensitive data, and configuration. Learn to mitigate key security risks in containerized environments.
Cyber Insurance - What Makes a Good Fit for You
Explore cybersecurity insurance essentials, including policy components, data elements for risk assessment, and key security controls. Learn to determine appropriate coverage and understand industry standards.
VMware Escapology - How to Houdini The Hypervisor
Explore VMware architecture, vulnerabilities, and escape techniques. Learn about backdoors, PCI, HDFS, and Host Open exploits. Includes live demo and Metasploit module discussion.
Where Did All My Data Go
Explore data classification, security risks, and best practices for protecting sensitive information in various environments, including FTP, PCI, and databases.
Oracle Data Redaction is Broken
Explore vulnerabilities in Oracle's data redaction service, including bypass techniques and privilege escalation attacks, with insights on protection and compliance implications.
Compliance vs Security - How to Build a Secure Compliance Program
Explore building a secure compliance program, balancing regulatory requirements with effective security measures. Learn from real-world breaches and gain practical insights for program development.
Compliance Audit - Assessing POS Devices for Tampering
Learn to assess POS devices for tampering, understand skimming attacks, and implement effective tampering assessment programs to protect against breaches and ensure compliance with PCI standards.
Run Your Security Program Like a Boss - Practical Governance Advice
Practical advice on running a security program effectively, covering governance, risk assessment, metrics, and compliance for business-critical data protection.
How the Mako System Connects and Protects the Network Edge - Cloud-Managed Secure Networking Demo
Discover how Mako's cloud-managed networking solution simplifies deployment and security for global sites through PCI-certified technology and efficient central management.
Secure Socks - Exploring Microservice Security in an Open Source Sock Shop
Exploring microservice security through an open-source sock shop, covering PCI compliance, trust, surface area limitation, container security, network segmentation, and software-defined networking.