Fueling Open Source Adoption with DevSecOps
Learn strategies for integrating open source securely using DevSecOps principles, addressing concerns, and leveraging tools to maximize benefits while minimizing risks in software development.
Running Sensitive Workloads on Untrusted Hosts - Project Enarx
Explore Project Enarx, a solution for running sensitive workloads on untrusted hosts using Trusted Execution Environments. Learn about isolation types, virtualization, and innovative security approaches.
Buildroot - What's New?
Explore recent developments and enhancements in Buildroot, the popular embedded Linux build system, with insights from industry expert Thomas Petazzoni.
The Making of 5G with AI and Open Source
Explore the future of telecommunications as AT&T's expert discusses integrating AI and open source technologies to revolutionize 5G networks and shape our connected world.
Cloud Infrastructure Telco Taskforce - From Zero to First Deliverable in 3 Months
Explore the Cloud iNfrastructure Telco Taskforce's rapid progress, decision-making principles, and future roadmap in this insightful panel discussion featuring industry experts.
Smart Cities in the Cloud - Edge Computing and Kubernetes
Explore edge computing and Kubernetes applications in smart city development, focusing on cloud-based solutions for urban infrastructure and technology integration.
Securing a Network Virtualized with Containers and Kubernetes - Example Solutions and Current Gaps
Explore container and Kubernetes network security, covering isolation, signing, benchmarks, service mesh features, and integrations. Learn about current solutions and gaps in virtualized network protection.
The International Effort to Establish Open Source Base Layer of Cyber Security for IACS
Exploring open-source cybersecurity for industrial control systems, focusing on IEC 62443 compliance, challenges, and the Linux Foundation's CIP project for Industry 4.0 standards.
News from the Embedded Graphics Space
Explore the evolving embedded GPU landscape, including new standards, hardware changes, and software ecosystem demands, with insights on Linux support and driver comparisons.
Challenges of Low Spec Embedded Linux
Explore challenges and solutions for low-spec embedded Linux devices, focusing on innovation, cost-effectiveness, and collaborative problem-solving in the consumer industry ecosystem.
Integrity Measurements and the Cruel World
Explore integrity measurement systems for embedded devices, overcoming challenges in security-enhanced Android and Linux to improve reliability without compromising user experience.
An Agile Approach to Threat Modeling for Securing Open Source Projects - EdgeX Foundry Case Study
Learn an agile approach to threat modeling for open source projects using EdgeX Foundry as an example. Discover practical steps, STRIDE model application, and strategies to evaluate security risks effectively.
Enarx - Attested, Secured Execution with AMD's SEV
Explore AMD SEV technology and Enarx project for enhanced virtualization security. Learn about encrypted VMs, attestation, and protected workloads in cloud environments.
Matching CVEs and Source Code for Vulnerability Detection
Explore techniques for mapping CVEs to source code, including parsing CVE data and quantifying correspondence statistics. Learn about open-source tools and potential AI applications for vulnerability detection.
Design Flaws and Deployment Chaos in Cloud-Based IoT Access Control Policies
Uncovers security vulnerabilities in IoT access control policies on cloud platforms, revealing design flaws and deployment issues that pose risks for manufacturers and users.
Writing Your Own Ticket to the Cloud Like APT - A Deep Dive to AD FS Attacks, Detections, and Mitigations
Explore AD FS attacks, detections, and mitigations for Azure AD security. Learn about identity federation vulnerabilities and strategies to protect cloud-based resources from unauthorized access.
Select Bugs From Binary Where Pattern Like CVE Days
Explores static code analysis techniques for vulnerability detection in binary code, focusing on pattern extraction and efficient searching across large codebases, with practical examples.
IAM The One Who Knocks
Exposing hidden risks in multi-cloud IAM, detailing access flaws, misconfigurations, and inconsistencies that can lead to unintended access and privilege escalation across cloud providers.
Controlling the Source - Abusing Source Code Management Systems
Explore vulnerabilities in Source Code Management systems, including reconnaissance, user role manipulation, and repository takeover. Learn attack scenarios and defensive strategies for GitHub, GitLab, and Bitbucket.
Scaling the Security Researcher to Eliminate OSS Vulnerabilities Once and For All
Explore automated security vulnerability detection and fixing in open-source software, including techniques like OpenRewrite and control flow analysis for efficient, large-scale remediation.
Security Holes in the Integration and Management of Messaging Protocols on Commercial IoT Clouds
Systematic study reveals vulnerabilities in IoT cloud platforms' MQTT integration, exposing risks of device control, DoS attacks, data theft, and status manipulation.