Updates on Migrating to Azure App Service
Explore new Azure migration tools for .NET and Java apps, including discovery, assessment, PowerShell scripts, and containerization, to streamline your migration process.
Learn TypeScript in 30 Minutes
Comprehensive guide to TypeScript fundamentals, covering installation, basic usage, types, interfaces, enums, and type checking in just 30 minutes for quick proficiency.
Securing the Edge - Challenges and Strategies in Edge Computing
Explore edge computing security challenges across industries, examining architectures, use cases, and perceived risks based on the 2022 AT&T Cybersecurity Insights Report.
Fuzzers, Analyzers, and Other Gophers Insecticides - Session 1
Explore techniques for discovering vulnerabilities in Go code, including static analysis, fuzzing, and fault injection. Learn about common bugs, concurrency issues, and tools for automated vulnerability detection in Go applications.
How Security Can Keep Pace with Continuously Evolving Cloud-Native Applications
Explore dynamic security approaches for cloud-native apps, aligning with modern development lifecycles and infrastructure-as-code to ensure security evolves alongside rapid architectural changes.
Choosing the Right Static Code Analyzers Based on Hard Data
Explore unbiased methods to assess static code analyzers' performance, learn about a new website presenting research results, and discover how to choose the right tools for your development pipeline.
Cloudy with a Chance of Persistence - 2019
Explore cloud persistence techniques and their impact on security in modern computing environments.
Sexy Mobile App Attacks by Example - 2019
Comprehensive review of security flaws in Android and iOS apps, covering anonymized findings, vulnerabilities in open-source apps, and issues in government-mandated applications. Practical insights for mobile security enthusiasts.
How to Secure a Node.js Application End-to-End - 2019
Learn essential techniques for securing Node.js applications, protecting user data, and mitigating online threats in web development. Explore best practices and tools specific to Node.js-based servers.
The FaaS and the Curious - Exploring AWS Lambda Security in 2018
Explore AWS Lambda's attack surface, including function hijacking, cloud environment access, and runtime reverse engineering. Learn about FaaS security risks and potential exploits.
Orchestrating Security Tools with AWS Step Functions - 2018
Automate security reviews in CI/CD pipelines using AWS Step Functions. Learn to deploy serverless systems for integrating security tools like static analysis and container scanning into developer workflows.
Microservices Security Landscape - 2018
Comprehensive overview of microservices security, covering SDLC, DevOps, and application-level aspects. Addresses attack surface expansion, continuous delivery, deployment patterns, and inter-service communication security.
Poking Holes in the Cloud: Auditing AWS Security - 2018
Explore tools and techniques for penetration testing AWS-hosted systems, covering reconnaissance, exploitation, and key insights for enhancing cloud security.
Serverless Security: A Pragmatic Primer for Builders and Defenders - 2017
Explore serverless security challenges and practical approaches in software supply chain, delivery pipeline, data flow, and attack detection. Learn serverless basics and adoption patterns.
Architecting for Security in the Cloud - 2017
Discover strategies to identify and close security gaps in cloud applications, building robust architectures that can withstand Internet attacks while maintaining scalability and agility.
The Case for Runtime Protection
Runtime protection: inoculating apps against vulnerabilities without changing code. Explores how instrumentation hardens applications, making OWASP Top Ten harder to exploit. Discusses accuracy, performance, and impact on security culture.
Cloud Security at Scale: The Chaos Continues - Part 2
Explore real-world cloud security implementations in finance and regulated industries, with insights on improvements and challenges faced by organizations.
TMI - The Kinds of Data Your Applications Are Leaking
Explore how web applications inadvertently leak sensitive information, and learn techniques to identify and prevent data exposure in various online services.
Manual JavaScript Analysis is a Bug - Automating Security Assessments for Modern Web Applications
Automate JavaScript security assessments: Learn efficient methods for analyzing modern web apps, focusing on key areas and streamlining the process for better results.
Improving Dynamic Vulnerability Scanners with Static Code Analysis
Combining static code analysis and dynamic scanning to enhance vulnerability detection in web applications, improving security by identifying hidden endpoints and reducing false positives.
OWASP Top 10 Training - Part 4
Comprehensive exploration of OWASP Top 10 security vulnerabilities, offering insights and strategies for web application protection and risk mitigation.