Practical SBOM Management with Zephyr and SPDX
Learn to identify, assess, and manage software components in Zephyr applications using SBOM standards and tools. Enhance security practices and respond effectively to vulnerabilities in embedded systems.
End of Life and End of Support in Policy and Practice
Explore end-of-life and end-of-support concepts in software, understanding operational and supply chain risks, and examining policy frameworks for producers and operators.
Getting Serious: Critical Disruptions, Thinking, and Responses to Cyber Threats
Explore escalating cyber threats to critical infrastructure and public safety, examining potential acts of war and strategies for preparedness and adaptation in the face of evolving global security challenges.
What Makes a Project Critical? Discovering and Evaluating Popular Open Source Software
Discover criteria for evaluating critical open source projects and learn to assess their impact on infrastructure and society.
Breaking Bad Multifactor - MFA Bypasses and How to Assess the Risks
Explore MFA bypass techniques and risk assessment strategies to enhance cybersecurity defenses and protect against evolving threats in authentication systems.
Measuring the Wrong Metric - Lessons from Attacks on Critical Services
Explore a framework for evaluating cyber incidents' impact on critical services, using case studies from Costa Rica, India, and Greece. Learn to assess scale, scope, and spread for effective resource prioritization.
Fresh SLSA and GUAC - Understanding Open Source Package Risks and Transparency
Explore open source package risks, transparency, and tools like GUAC, SLSA, and SBOMs to enhance software supply chain security and make informed decisions on dependencies.
DHS Supporting Critical Infrastructure Through Open-Source Software Prevalence Effort
Explore DHS's innovative methodology for identifying and assessing OSS in IT/OT devices, enhancing critical infrastructure cybersecurity through comprehensive vulnerability scoring and risk management.
Why "Safety"? How We Use Measurement to Advance Governance of Technology
Explore Internet Safety Labs' approach to software safety, including measurement methodologies, app safety labels, and data collection techniques for advancing technology governance.
Tools and Techniques to Optimize Your Hematology Laboratory's QC Strategy
Discover effective tools and techniques to enhance your hematology lab's quality control strategy, ensuring accurate and reliable test results for optimal patient care.
Open-Source Vulnerability Management: Use the Source - DevSecOps 2022
Explore open-source vulnerability management techniques using source code analysis for effective security practices in DevSecOps environments.
Great Security Is One Question Away
Discover how asking the right security questions can transform your Python development practices and enhance overall project safety.
Heterogeneity of Breast Cancer Genomes: Going Beyond Therapy to Risk Assessment and Prevention
Explore breast cancer genome heterogeneity, focusing on risk assessment and prevention strategies beyond therapy. Gain insights from expert Olufunmilayo Olopade at the CGC 2023 Annual Meeting.
Advancing the Population's Health: Moving from Measuring Risk to Action - Sixth Geoffrey Rose Memorial Distinguished Guest Lecture
Explore epidemiological research's impact on public health action through case studies in environmental health, examining methods for translating evidence into policy.
Unpacking Black Box Epidemiology: Understanding Causes of Chronic Diseases and Prevention Tools
Explore epidemiological data's role in understanding chronic diseases and identifying high-risk individuals through biobank studies and molecular measurements.
CVE Context Matters - Prioritizing Vulnerabilities in Cloud-Native Projects
Explore vulnerability scanning in cloud-native projects, learn to prioritize vulnerabilities, and implement effective scanners. Gain insights on assessing relevance and improving daily workflows.
Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors
Explore protective measures against adversarial actors infiltrating AI supply chains. Learn to secure data, models, and pipelines, implement security controls, and mitigate risks in AI systems.
OWASP Cornucopia - Introduction to Application Security Card Game
Explore OWASP Cornucopia, a card game designed to help software developers identify security requirements in web applications, with expert insights from Johan Sydseter.
Assessing Third-Party Libraries More Easily with Security Scorecards
Learn to evaluate third-party library security efficiently using Security Scorecards, enhancing your ability to assess and mitigate potential vulnerabilities in software dependencies.
Start Covering Your Bases and Stop Chasing APT Headlines
Learn effective cybersecurity strategies to protect against common threats, moving beyond headline-grabbing APTs to focus on fundamental security practices and risk mitigation.
Reassessing 50,000 Vulnerabilities: Insights from SSVC Evaluations in Japan's Largest Telco
Practical vulnerability prioritization using SSVC: Insights from evaluating 50k+ vulnerabilities in Japan's largest telco, improving efficiency and effectiveness over CVSS-based approaches.