Protect Secret Keys in Jamstack Apps - Learn With Jason
Learn to secure API keys in Jamstack apps using Postman for rapid prototyping and development. Explore techniques for protecting sensitive data while building secure and efficient web applications.
Secure Coding Guidelines for Java SE - Overview and Best Practices
Learn essential Java secure coding practices to prevent vulnerabilities. Covers guidelines, real-world examples like Log4Shell, and practical tips for implementing security throughout the development process.
Understanding Supply Chain Threats with Static Analysis - GopherCon 2023
Explore a CLI tool for Go that detects privileged permissions in package dependencies, enhancing security and preventing supply chain attacks.
What Cryptographic Library Developers Think About Timing Attacks
Explore cryptographic library developers' perspectives on timing attacks, their mitigation strategies, and the challenges in implementing secure cryptographic systems.
Verifying and Synthesizing Constant-Resource Implementations with Types
Explores a type system for verifying constant-resource implementations, enhancing security against side-channel attacks while allowing natural programming models. Introduces resource-aware noninterference and automated repair techniques.
Code Security Reinvented: Navigating the Era of AI
Explore AI's role in enhancing code security through GitHub Copilot, featuring practical demos and best practices for leveraging global security knowledge in software development.
Guardians of GitHub
Explore GitHub security practices and learn to protect your repositories from common vulnerabilities with insights from industry experts.
Securing and Trusting Third-Party Javascripts in Your Web App
Learn techniques to secure and trust third-party JavaScript in web applications, enhancing overall security and mitigating potential vulnerabilities.
Non-Crypto Constant-Time Coding
Explore cache attacks, SGX technology, and tools for writing constant-time code to protect confidential data from side-channel vulnerabilities in various computing contexts.
Defensive Programming x FinTech
Explore defensive programming techniques for FinTech, focusing on avoiding common errors, achieving safe and clean code, and balancing between defensive and overly defensive practices.
Ghost in the Shell
Explore vulnerabilities in SAP systems and learn advanced techniques for detecting and exploiting security flaws in ABAP code and SAP applications.
Vulnerabilities in Custom SAP ABAP Code
Explore vulnerabilities in custom SAP ABAP code and learn effective strategies for identifying and mitigating security risks in SAP systems.
Towards a LangSec Aware SDLC
Explore integrating Language-theoretic Security principles into the Software Development Life Cycle for enhanced system security and robustness.
Packagedna - Escaneando el ADN de tu código para detectar acciones maliciosas
Escaneo del ADN del código para detectar acciones maliciosas en el ciclo de vida de aplicaciones, incluyendo tecnologías Cloud. Enfoque en prácticas DevSecOps y análisis de seguridad defensiva y ofensiva.
The Power of Guardrails - How to Slash Your Risk of XSS in Half
Discover how secure code defaults can significantly reduce XSS vulnerabilities and elevate overall security. Learn strategies to implement effective guardrails and minimize recurring security risks.
Why Security-as-a-Feature Will Never Happen
Explore why secure coding remains elusive, examining cultural issues, industry challenges, and potential solutions for integrating security into software development practices.
Windows Phone App Security for Builders and Breakers
Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.
Costs of Coding to Compliance
Explore the challenges of coding for compliance, learn strategies to address security gaps, and discover how to prioritize initiatives for better risk management in application security.
DevSecOps with OWASP DevSlop
Learn DevSecOps through hands-on examples with OWASP DevSlop. Explore secure component management, secret handling, testing techniques, and open-source tools to enhance your pipeline security.
Exploiting XPC in AntiVirus Software
Explore vulnerabilities in macOS antivirus software through XPC exploitation, uncovering security flaws and providing guidance for developers to create secure XPC services.
Attacking the Data Before the Decision
Explore AI's impact on stock market manipulation, machine learning models, and data security in financial trading systems.