The Simple, Yet Lethal Anatomy of a Software Supply Chain Attack
Explore the anatomy of software supply chain attacks, their potential lethality, and strategies for prevention in this insightful session on cybersecurity vulnerabilities.
Software Supply Chain Threat Landscapes - A Moving Target
Explore evolving software supply chain threats and learn strategies to protect your organization from vulnerabilities, malicious attacks, and emerging risks in the digital ecosystem.
The Supply Chain Conundrum: Why Traditional Application Security Is Failing Us
Explore why traditional app security falls short in protecting against supply chain attacks. Learn proactive, attacker-centric approaches and best practices to safeguard your software development process.
New Tales of Wireless Input Devices
Explore security vulnerabilities in wireless input devices and learn about potential attack vectors and countermeasures for enhanced cybersecurity awareness.
North American Power-Grid Network - Failures and Opportunities
Explore cascading failures in the U.S.-South Canada power grid, identifying vulnerable components and discussing mitigation strategies for improved grid resilience and renewable energy integration.
Supply Chain Security: Building a Knowledge Graph for Artifact Relationships
Explore a supply chain knowledge graph tool that enhances understanding of artifact relationships, enabling better assessment of vulnerabilities and dependencies in software development.
Fighting the Next War - Future Threats to OSS and Software Supply Chain Security
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
Secure Your Software Supply Chain Using Observability
Explore techniques for enhancing software supply chain security through observability, focusing on key benefits and practical implementation strategies.
How to Reduce CVE Noise with VEX - Vulnerability-Exploitability eXchange
Explore VEX, a tool to enhance vulnerability management by providing context to CVEs, improving risk assessment, and streamlining communication between vendors and consumers.
Cyber Crash Investigations: Learning from Past Crises
Explore insights from cyber crisis investigations, focusing on prevention, impact reduction, and effective response strategies. Learn from real-world case studies to enhance organizational readiness.
Security Risks of Low-Code/No-Code Applications - What Could Go Wrong?
Explores security risks of low-code/no-code platforms used by business professionals. Presents research findings, demonstrates common security issues, and introduces OWASP framework for mitigating risks in business-led development.
Demystifying and Exploiting IoT Timeout Behaviors in Smart Homes
Explore IoT timeout behaviors in smart homes, uncovering vulnerabilities and exploitation techniques to enhance cybersecurity awareness and protection strategies.
Securing Software Supply Chains with In-Toto
Explore in-toto, a framework for securing software supply chains, and learn its implementation strategies for enhancing cybersecurity in software development processes.
Human Involvement Behind Remote Desktop Protocol Brute-Force Attacks
Explore human involvement in RDP brute-force attacks through analysis of 3.4 million connection attempts. Learn about attack patterns, attacker strategies, and risk mitigation techniques in this cybersecurity research presentation.
Attacking and Protecting Artificial Intelligence
Explore techniques for attacking and defending AI systems, focusing on security vulnerabilities and protective measures in machine learning applications.
Open Source Security: Best Practices for Early Detection and Risk Mitigation
Discover best practices for early detection and risk mitigation in open source security. Learn about vulnerability patching, automation, and practical examples to keep your systems secure.
Malice in Chains - Supply Chain Attacks Using Machine Learning Models
Explore potential supply chain vulnerabilities in machine learning models and learn strategies to mitigate risks in AI-driven systems.
OWASP IoT Security Testing Guide (ISTG)
Comprehensive guide for IoT security testing, covering methodologies and best practices to identify vulnerabilities and enhance device protection in the interconnected world.
Cryptographic Governance - Software Supply Chain Security with CBOM
Explore software supply chain security using Cryptographic Bill of Materials (CBOM) for enhanced governance and risk mitigation in development processes.
OWASP Dependency Track - Fortifying the Software Supply Chain
Explore strategies to secure software supply chains using OWASP Dependency Track, a powerful tool for identifying and mitigating vulnerabilities in third-party components.
Using Threat Modeling to Create a DevSecOps Plan
Discover how to leverage threat modeling for effective DevSecOps planning. Learn to identify threats, select appropriate security tools, and seamlessly integrate them into your development pipeline.