MacGyverOps: Secure Your Development Environment with the Tools Around You
Leverage existing tools to create focused security feedback, minimizing distractions while enhancing development velocity and security in DevOps environments.
Secure Software Factory - Adding SBOM and Code Signing to Security Checks
Enhance your security checks with SBOM and code signing in a secure software factory, improving software supply chain integrity and compliance.
Grip on Secure Software Development - Dutch Government Standard for Outsourcing - AppSecEU 2016
Learn about the Dutch government's standard for secure outsourcing, exploring key principles and practices for effective implementation in software development projects.
Secure Software Development Framework: Towards an SDL for All SDLCs
Proposes a flexible Secure Software Development Framework adaptable to various development methodologies, enhancing security while maintaining efficiency and ease of adoption for developers and architects.
Education and Training for Secure Software Development and Distribution
Learn essential strategies for developing and distributing secure software, addressing industry gaps and exploring steps to enhance cybersecurity practices in software engineering.
Building a Secure By-Design Pipeline with an Open Source Stack
Explore open-source tools and strategies for implementing a secure-by-design pipeline, enhancing software development practices and strengthening overall cybersecurity posture.
Why Security Professionals Should Write Code - DefCamp - 2021
Explore the importance of coding skills for security professionals, covering knowledge transfer methods, automation, and cross-specialization to enhance cybersecurity practices and team collaboration.
OWASP Top 10 Proactive Controls
Comprehensive guide to OWASP Top 10 Proactive Controls for secure software development, covering essential techniques from query parameterization to threat modeling, presented by expert Jim Manico.
Human Factors That Influence Secure Software Development
Explores human factors influencing secure software development, including environmental conditions, developer characteristics, and team dynamics. Discusses strategies to identify and mitigate vulnerability-prone code before issues arise.
Build It, Break It, Fix It - Contesting Secure Development
Explore secure development through a competitive contest format, analyzing builder strategies, common vulnerabilities, and resilience in software security.
Securing Cloud Delivery Pipelines - Findings From A Blue-Red Team Security Simulation
Explore findings from a blue/red team security simulation focused on securing cloud delivery pipelines, with insights on tooling, advanced attackers, and best practices.
Secure Software Development Framework - An Industry and Public Sector Approach
Explore industry-led framework for secure software development, addressing regulatory challenges, open source, metrics, and emerging technologies like AI in cybersecurity.
From the OWASP Top Ten to the OWASP ASVS
Comprehensive guide to web application security, exploring OWASP standards beyond Top Ten lists. Learn about ASVS, its 180+ requirements, and how to implement a robust application security program.
Project Everest - Fast, Correct, and Secure Software for Deployment Now
Explore Project Everest's verified, high-performance secure communication components. Learn about F* programming, EverCrypt, EverParse, and EverQuic-transport, and their adoption in major projects.
DevSecOps, Chaos Security, and Not Being Left Behind
Exploring DevSecOps and Chaos Security Engineering to integrate business, development, and security teams for effective product security and staying ahead of adversaries.
Trust No-One, Not Even Yourself - The Weak Link Might Be Your Build Tools
Explore security vulnerabilities in build tools and development environments, emphasizing the importance of vigilance in software creation processes.
Building Secure Software with OWASP
Explore OWASP's free tools and guides for enhancing software security, from explicit requirements to secure development and verification, presented by an experienced OWASP contributor.
Security Audits as an Integral Part of PHP App Development
Learn to integrate security audits into PHP application development, uncovering vulnerabilities and enhancing overall software security through expert insights and practical implementation strategies.
AppSec - From the OWASP Top Ten to the OWASP ASVS
Comprehensive overview of application security standards, comparing OWASP Top Ten to the more detailed ASVS, providing developers with in-depth guidance for secure software development.
Why Do Developers Make Dangerous Software Errors
Explore why developers create risky software, the importance of secure coding practices, and strategies for implementing effective software assurance in modern technology development.
Think Like a Hacker
Explore hacker mindsets and strategies to enhance system security. Learn practical steps for protecting data, improving authentication, and addressing vulnerabilities in your organization's digital infrastructure.