Relationship Therapy: Using Data and Automation to Keep Developers and Security Teams Happy
Strategies for improving developer-security team relationships through data and automation, focusing on building trust and balancing innovation with risk mitigation in software development.
Cybersecurity Certification for IoT Software - Pros and Cons
Experts debate the pros and cons of a CyberUL certification for IoT devices, discussing its potential impact on security, innovation, and industry standards in the rapidly expanding digital infrastructure.
Attack Tree Vignettes for Containers as a Service Applications - AppSecEU 2016
Explore attack tree vignettes for Containers as a Service applications, enhancing your understanding of security vulnerabilities and mitigation strategies in cloud environments.
Functional Safety Basics for Open Source Software Developers
Learn essential functional safety principles for open-source software development, focusing on risk assessment, safety requirements, and industry standards to enhance software reliability and safety.
Applying Governance to CI/CD Pipelines - Mitigating Software Risks
Explore CI/CD governance, its role in preventing security breaches, and strategies to mitigate software risks in the wake of the SolarWinds hack.
Safety, Security, Quality - Artificial Intelligence versus Common Sense
Explore AI's impact on safety, security, and quality in infrastructure, comparing it with traditional approaches and discussing community collaboration and effort estimation.
A Machine Learning Approach to Portfolio Pricing and Risk Management for High-Dimensional Problems
Explore machine learning approaches for portfolio pricing and risk management in high-dimensional problems with expert Damir Filipovic from EPFL and Swiss Finance Institute.
Generative AI: The Three Concerns Problem and Opportunities - Breaking Ground
Explore GenAI and LLMs' three key concerns and opportunities, with frameworks for implementing necessary guardrails, presented by security expert Sounil Yu.
Help from the Helpdesk - Cybersecurity Insights and Career Advice
Learn effective helpdesk strategies, career insights, and security best practices from industry expert Mick Douglas. Gain valuable tips on active defense, risk assessment, and forensics in this informative talk.
Managing Your Worst Digital Day - Building Resilience into Cyber-Physical Systems
Explore strategies for building resilience in cyber-physical systems to manage and mitigate potential digital crises, enhancing overall security and preparedness in our interconnected world.
Reliable Data for Large ML Models: Principles and Practices
Explore best practices for ensuring reliable data in large ML models, focusing on challenges in LLMs and applying SRE principles to manage data risks in production systems.
Avengers Assemble: Threat Modeling Kubernetes Clusters at Massive Scale
Explore threat modeling for Kubernetes clusters at scale, identifying potential security risks and countermeasures in microservices architectures to enhance protection against unauthorized access and resource misuse.
Cloud Native Governance, Risk, and Compliance - Policy-as-Code Applications
Explore policy-as-code's role in security, admission control, and automated compliance auditing. Learn how to implement governance across diverse environments for comprehensive risk management.
From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10
Explore strategies to mitigate OWASP Kubernetes Top Ten security risks using CNCF projects. Learn actionable insights to enhance the security of your Kubernetes deployments.
Threat Modelling: How to Improve Your Kubernetes Security Posture
Learn to enhance Kubernetes security through innovative threat modeling techniques, focusing on identifying risks in complex environments and improving overall security posture for development and SRE teams.
Thinking Like a Threat Actor in Kubernetes Environments
Explore threat actor mindsets to enhance Kubernetes security. Learn proactive defense strategies and vulnerability assessment techniques for robust cloud-native environments.
Policy-as-Code Across the Stack
Explore Policy-as-Code implementation using open-source frameworks for enhanced security and compliance across the technology stack, reducing manual intervention and improving risk management.
Navigating AI and LLM Governance and Risk - Harnessing Generative AI Responsibly
Explore the impact of Generative AI on governance and risk, and learn about a 5-pillar framework for responsible AI adoption in this insightful discussion led by industry experts.
Calculating Smart Contract Vulnerability Impact - Low to Critical
Explore a new framework for assessing smart contract vulnerabilities, learn to calculate risk and impact, and discover how to prioritize security weaknesses in blockchain systems.
AI Safety and Compliance - Securing the New AI Attack Surface
Explore AI's security challenges, emerging compliance requirements, and crowdsourcing solutions for safeguarding the evolving AI landscape in various industries.
Hard Choices and Tight Timelines: Skip-level Tradeoff Decisions During Incidents - SREcon24 Americas
Explore management's role in critical incident response, examining tradeoff decisions, involvement patterns, and coordination strategies to enhance organizational resilience during unexpected events.