Exploiting Hardware Glitches and Side Channels in Perfect Software
Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.
A DevSecOps Tale of Business, Engineering, and People
Explore DevSecOps through a historical lens, examining its impact on business, engineering, and resilience. Learn from past challenges to build high-performing teams and implement effective DevSecOps strategies.
Building an AppSec Program with a Budget of $0 - Beyond the OWASP Top 10
Explore OWASP projects to build a comprehensive AppSec program without spending money. Learn how to implement open-source tools for training, development, testing, and defense to create a robust security framework.
The Perimeter Has Been Shattered - Mobile and IoT Security Challenges
Explore how mobility and IoT have disrupted traditional enterprise security, examining new threats and the limitations of current defenses. Learn practical strategies to improve mobile and IoT security in the modern landscape.
Effective Usage Analysis: The Shortest Path Between Developer and Accelerated Product Releases
Discover how effective usage analysis prioritizes vulnerabilities, enabling developers to focus on exploitable risks, streamline remediation, and accelerate product delivery.
Temporal: Your Company as a Knowledge Graph - The Foundation of Cybersecurity's Future
Explore how Security Knowledge Graphs revolutionize cloud security by mapping entity networks, enabling automated reasoning, and improving data governance across multi-cloud infrastructures.
Temporal: Objects in the Rear View Mirror Are Closer Than They Appear - Application Security Challenges in Cloud Native Era
Explore how software development changes impact application security, challenges in Cloud Native workloads, and strategies for staying secure in evolving tech landscapes.
Over 20 Years of SQL Injection Attacks - Refining Web Attack Detection Using Data Mining Techniques
Explore data mining techniques to refine SQL injection attack detection using CDN logs, NLP, and clustering for improved web security and emerging threat identification.
AppSec Challenges - Overcoming Framework Limitations and Building Robust Security
Exploring challenges in application security, analyzing framework limitations, and discussing robust approaches to improve security at scale while making it more manageable.
Building a Secure Future: Lessons from Past and Present Information Security Challenges
Explore the future of information security, examining past lessons, current challenges, and emerging technologies like quantum cryptography to build a more secure digital world.
Secure React Native Apps Against API Abuse
Aprenda a proteger aplicativos React Native contra abusos de API, explorando vulnerabilidades comuns e implementando estratégias de defesa eficazes para garantir a segurança de seus aplicativos móveis.
ReproNow - Saving Time in Reproducing and Triaging Security Bugs
Introducing ReproNow: an open-source tool for efficiently reproducing and triaging security vulnerabilities. This chrome/firefox extension captures researcher's walkthrough, including network requests, streamlining bug validation for security engineers.
Passive Fingerprinting of HTTP/2 Clients
Explore HTTP/2 protocol nuances for passive client fingerprinting. Learn about implementation differences, potential use cases, and observed attacks on Akamai's platform.
Software Supply Chain Lifecycle Management: Reducing Attack Vectors and Enabling Rugged DevOps
Exploring software supply chain lifecycle management to reduce attack vectors and enable rugged DevOps, focusing on IoT security, third-party software risks, and standards-based automation for threat detection.
Increasing Web Security with the Power of HTTP Headers
Explore how HTTP headers can enhance web security, focusing on practical implementation strategies and best practices for developers and security professionals.
Preventing Common Security Mistakes in the MEAN Stack - AppSec EU 2017
Learn to secure Angular applications by understanding common threats and implementing effective defenses. Covers script-based attacks, session management, CSRF, and more for robust client-side security.
Pentesting Voice Biometrics Solutions - AppSec EU 2017
Explore pentesting techniques for voice biometrics, including tools for IVR automation, voice fuzzing, and bypassing algorithms. Learn security requirements and compare with traditional password methods.
Combining Security Risks of Native and Web Development in Hybrid Apps - AppSec EU 2017
Explore security risks in hybrid app development, combining native and web technologies. Learn defensive programming and testing strategies for secure cross-platform mobile applications.
DNS Hijacking Using Cloud Providers: No Verification Needed - AppSec EU 2017
Explore advanced domain hijacking techniques, including undisclosed methods, to understand vulnerabilities in DNS providers and cloud services. Learn to identify and mitigate risks beyond common subdomain takeover scenarios.
Fail, Learn, Fix - Improving Security the Old-Fashioned Way
Explore how past failures can drive future security improvements. Learn from historical examples to enhance cloud application security practices and foster collaborative problem-solving.
How to Slay a Dragon - A Three-Step Strategy for Solving Complex Security Problems
Discover a three-step strategy for tackling complex security challenges in Chrome, focusing on incremental progress, accepting imperfections, and considering long-term costs.