Finding Stable Ground: Using Science and Partnerships to Manage Landslide Hazards
Explore landslide hazard management through scientific approaches and collaborative partnerships, featuring expert insights on mapping, risk assessment, and early warning systems.
The How and Why of the OWASP Top Ten 2021
Explore the OWASP Top Ten 2021 update, its significance, and data-driven insights. Learn about critical application security risks, analysis methodologies, and industry impact.
Are You Safe from OWASP #11? - Creating a Successful API Security Program
Explore API security beyond Top 10 lists, focusing on building a comprehensive program at scale. Learn key strategies for successful API protection and management.
Empowering the Guardians of Your Code Kingdom
Explore strategies for empowering developers to become guardians of code security, enhancing application protection and fostering a security-first mindset in software development.
Supply Chain Security - Part 1
Explore best practices for establishing trust across supply chains and gain insights on shifting from technology inspection to relationship-based trust in an era of increased third-party dependencies.
Data Security: Balancing Security and Usability - Tradeoffs and Considerations
Explore tradeoffs in data security, usability, and system architecture. Learn about constraints, information needs, and potential pitfalls in building secure yet functional computer systems.
Overcoming Resistance to Threat Modeling in Organizations
Strategies for overcoming resistance to threat modeling in organizations, addressing common obstacles, and turning initial rejections into opportunities for gradual adoption and growth.
Knowing What Risks Matter and Don't in Your Open Source
Explore key findings on open-source software risks, including usage trends, vulnerability rates, and best practices. Learn to prioritize and address critical issues in application security.
Securing Generative AI - Is It All an Illusion?
Explore GenAI/LLM security, vulnerabilities, and assessment strategies. Learn a flexible framework for securing and deploying commercial AI systems, with insights from real-world experiences.
Insane in the Supply Chain - Threat Modeling for Attacks on AI Systems
Explore AI supply chain risks and threat modeling strategies to protect against attacks that could impact company reputation and executive liability.
Understanding the Cyber Resilience Act - Key Obligations and Compliance
Explore the EU's Cyber Resilience Act and its impact on IT industry compliance. Learn key obligations and prepare your organization for upcoming regulatory changes.
Managing Vulnerabilities in Open-Source Dependencies
Learn strategies to secure open-source dependencies, evaluate software composition analysis tools, and shift from reactive to proactive security postures in product development.
Hunting Down the Monsters Hidden in Your Software Supply Chain
Uncover and mitigate hidden threats in your software supply chain. Learn effective strategies to enhance security and protect against vulnerabilities.
Security Keynote - Open Source Software and Cybersecurity
Explore cybersecurity insights and strategies with Dr. Allen Friedman's keynote address on critical security challenges and solutions in the digital landscape.
Demystifying SBOMs: Strengthening Cybersecurity Defenses
Explore Software Bill of Materials (SBOMs) as a crucial tool for enhancing cybersecurity, identifying vulnerabilities, and managing software supply chain risks in organizations.
Designing Security and Privacy - A Developer's Guide to Threat Modeling with OWASP SAMM
Learn threat modeling techniques using OWASP SAMM to enhance security and privacy in software development, empowering developers to identify and mitigate potential risks effectively.
Managing Vulnerability Overload with OWASP Tools and Strategies
Discover OWASP's strategies for managing overwhelming security vulnerabilities, enhancing your ability to prioritize and address critical threats effectively.
Paved Roads to Express RBAC in Threat Models
Learn effective techniques for incorporating Role-Based Access Control (RBAC) into threat modeling, enhancing security design and risk assessment for software systems.
Assessment of Violent Ideations - Psychiatry Project ECHO
Explore assessment techniques for violent ideations with Dr. Colleen Lillard, gaining insights into psychiatric evaluation and risk management strategies.
Zero Trust Threat Modeling - Implications for Application Security
Explore zero trust's impact on application security and threat modeling. Learn new design principles, threats, and approaches for effective zero trust threat modeling in modern environments.
Open Software Supply Chain Attack Reference (OSC&R) - OWASP Foundation
Explore the OSC&R framework for software supply chain security, analyzing real-world attacks and improving DevSecOps programs to enhance overall security posture.