Network ACLs Made Easy: Establishing Zero Trust Network Policies
Learn to automate Zero Trust network policies using AWS VPC Flow Logs and Terraform. Discover techniques for analyzing traffic data, optimizing security groups, and implementing efficient access controls without third-party solutions.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification
Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.
Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure
Explore challenges and solutions in multi-tenant identity management for B2B, B2C, and M2M environments, focusing on security, user experience, and balancing isolation with resource sharing.
SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport
Explore SPIFFE ecosystem growth, focusing on Linkerd and Teleport's implementation for workload identity verification across Kubernetes clusters and external environments.
All I Know About Cybersecurity I Learned from Fungus
Explore fascinating parallels between fungal biology and cybersecurity principles, gaining unique insights into cloud-native application security and best practices through nature-inspired analogies.
Leveraging Cryptographic Lineage for Context and Connected Trust
Explore cryptographic lineage for enhanced security, addressing challenges in AI adoption through attested claims and chain of custody, building on zero trust principles for improved traceability and trust in distributed systems.
A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security
Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.
Privacy Detective - Sniffing Out Your Data Leaks for Android
Discover techniques to detect privacy-infringing behaviors in Android apps. Learn about hooking system functions, decrypting TLS traffic, and automating privacy data transmission analysis.
Web Application Security: The Secret to Hack-Proof Apps - SQL Injection - Part 2
Discover step-by-step methods to secure web applications from SQL injection threats. Learn to identify vulnerabilities, exploit techniques, and implement effective prevention strategies for robust security.
Fake CAPTCHA Malware Analysis
Explore the deceptive tactics of malware disguised as CAPTCHA, uncovering its distribution methods and analyzing its impact on cybersecurity.
Secured Open-Source Linux for Electric Vehicle Supply Equipment (EVSE)
Explore security challenges, vulnerabilities, and standards for electric vehicle charging stations, and learn how to address them with open-source Linux solutions.
Adopting Open Source Securely - From Bare Metal to Cloud
Explore secure open-source adoption strategies from bare metal to cloud, covering threat prevention, breach recovery, and Canonical's comprehensive security solutions for enterprise environments.
BuildSafe Deep Dive - Getting Supply Chain Security Right Using Nix
Explore BuildSafe's capabilities for secure application builds using Nix, including package search, CVE information, and simplified development workflows.
Supply Chain Security - The First Steps
Explore supply chain security essentials, including zero trust, SBOMs, and sigstore. Learn to generate and utilize SBOMs to enhance software development security and meet compliance requirements.
Blockly Themes for Accessibility - Day 2 Session 2
Explore Blockly themes for enhanced accessibility, focusing on color vision deficiency and customization options in visual programming environments.
Differentially Private Synthetic Data Generation via Foundation Model APIs
Explore generating high-quality differentially private synthetic data using foundation model APIs, overcoming challenges and achieving state-of-the-art results without accessing model weights.
Inside Apple's Lightning: JTAGging the iPhone for Fuzzing and Profit
Explore Apple's Lightning protocol, learn iPhone JTAGging techniques, and discover fuzzing methods for potential vulnerabilities and profit.
Exploit Engineering: Attacking the Linux Kernel
Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.