SANS 2022 Cyber Threat Intelligence Survey - Key Findings and Adaptations
Explore shifts in cyber threat intelligence due to workplace changes, its role in ransomware response, and preparation for unpredictable events with severe consequences.
Keeping Up with CVEs - Security Response Management Best Practices
Explore security update challenges, best practices, and tools for managing vulnerabilities in released products. Learn strategies to efficiently handle CVEs and maintain software security.
Preparing for the Next Disaster - A Look Ahead with FEMA
Explore FEMA's role in disaster relief and recovery, challenges faced, and future preparedness strategies with insights from the agency's leader on recent catastrophic events.
A Look Over My Shoulder - The DNI Reflects and Foreshadows
DNI Dan Coats discusses emerging global threats, intelligence challenges, and future security concerns in a candid conversation with Andrea Mitchell at the Aspen Security Forum.
Threat Modeling Panel - APPSEC Cali 2018
Expert panel discusses threat modeling techniques, challenges, and best practices in application security, featuring insights from industry leaders at major tech companies.
Effective Usage Analysis: The Shortest Path Between Developer and Accelerated Product Releases
Discover how effective usage analysis prioritizes vulnerabilities, enabling developers to focus on exploitable risks, streamline remediation, and accelerate product delivery.
AppSec Challenges - Overcoming Framework Limitations and Building Robust Security
Exploring challenges in application security, analyzing framework limitations, and discussing robust approaches to improve security at scale while making it more manageable.
Follow the Money - Investing in Health
Explore the diverse landscape of health investments, from venture capital to social entrepreneurship, and their potential impact on healthcare's future and global well-being.
How to Slay a Dragon - A Three-Step Strategy for Solving Complex Security Problems
Discover a three-step strategy for tackling complex security challenges in Chrome, focusing on incremental progress, accepting imperfections, and considering long-term costs.
The Evil Friend in Your Browser - Browser Extension Security Risks
Explore the hidden dangers of browser extensions, their security model limitations, and potential risks to user privacy. Learn about real-world analysis findings and discuss improved security measures.
Embedding GDPR into the Software Development Lifecycle
Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, threat modeling, and breach notification processes.
Remediating XSS in GitHub Open Source Projects - Lessons Learned
Insights on scaling XSS remediation across GitHub open source projects, focusing on risk reduction, adding security controls, and automating code modification for diverse applications.
Managing Vulnerability Response Dependencies in Third-Party Components - AppSecCali 2019
Explore a framework for managing dependencies in vulnerability response, enabling proactive PSIRT strategies and improving product security through early-stage decision-making and controls.
Threat Modeling with PASTA - Application Security Case Studies
Explore risk-centric threat modeling using PASTA methodology, with case studies in IoT, E-Commerce, and Mobile Applications. Learn to align design and coding techniques with application use cases and potential threats.
Strategic Defense in Cybersecurity - OWASP AppSec CA 2017
Explore strategic defense in cybersecurity with insights from Kevin Cardwell, an expert consultant with extensive experience in banking, financial institutions, and government red team operations.
When Bandit Strikes - Defending Your Python Code
Learn to defend Python code against security threats with insights from experts Will Bengtson and Travis McPeak. Discover proactive strategies and best practices for enhancing your application's security posture.
Scaling Security through Context-Based Security Assessments
Streamlining security assessments through context-based automation, enabling efficient scaling and tailored workflows for product security teams in rapidly growing organizations.
Practical Threat Modeling for Real-World and Cloud Situations in Hybrid Work Environments
Practical guide to threat modeling for cloud and hybrid work environments, covering creation, identification, addressing, and validation of threats with real-world examples and tools.
OWASP Top 10 - The Making of the OWASP Top 10 and Beyond
Explore the creation process and principles behind the OWASP Top 10, a crucial resource for web application security, including data analysis, likelihood management, and scoring methodologies.
Threat Modeling of Containerized Applications - Three Levels of Complexity
Optimize threat modeling for containerized applications, focusing on efficiency, new dimensions, and real-world impact. Learn to measure success and implement incremental improvements in application security.
Privacy Threat Modeling - Analysis of Cloud Services Against Privacy Regulations
Learn to analyze cloud services for privacy threats and regulatory compliance using threat modeling techniques, enhancing your ability to protect sensitive data.