Stop Chasing Vulnerabilities - Introducing Continuous Application Security
Explore continuous application security strategies using open-source tools for real-time monitoring and analytics, shifting focus from individual vulnerabilities to comprehensive portfolio-wide assurance.
Network Baseline Generation and Alerts with Bropy - Security Onion 2017
Learn to generate network baselines and alerts using Bropy, empowering small security programs with effective monitoring and threat detection techniques.
VEXing Open Source Security - Vulnerability Data for Everything
Explore the Vulnerability Exchange Format (VEX) standard for improving vulnerability management in open source projects and enterprise software security.
Using OpenSSF's Allstar to Secure Your Organization's GitHub Repositories
Learn to enhance GitHub repository security with OpenSSF's Allstar tool, exploring its features and implementation for robust organizational protection.
Find and Fix Software Security Problems - Preventing Security Mistakes
Explore effective strategies for identifying, fixing, and preventing software security issues. Learn how to prioritize and address vulnerabilities to enhance overall system security.
DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study
探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和运维流程中，提高效率和安全性。
Keeping Up with CVEs: Finding Needles in Haystacks - Practical Vulnerability Assessment
Discover practical approaches to assess product security beyond raw vulnerability numbers, focusing on risk assessment and understanding scanner limitations in container image analysis.
How do Mature DevOps Teams Manage Software Security?
Explore strategies for managing software security in mature DevOps environments, focusing on best practices and innovative approaches for integrating security into the development lifecycle.
First Steps to Full Lifecycle Security with Open Source Tools
Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.
MISP Updates - Hack.lu 2023
Explore the latest updates and enhancements to MISP, the open-source threat intelligence platform, presented by Andras Iklody at Hack.lu 2023.
Automate Security - Lessons Learned from Successful Security Automation Programs
Learn key strategies for successful security automation, increasing team efficiency, and engaging external teams. Gain insights from real-world examples to kickstart your automation journey and achieve rapid results.
More with Less Screen Time: An Application Security Toolchain
Discover efficient application security strategies and toolchains to maximize productivity while minimizing screen time in this insightful conference talk by Spyros Gasteratos.
Scanning at Scale with OWASP ZAP - Technical Challenges and Improvements
Explore techniques for scaling OWASP ZAP scans, including technical challenges, modifications, and improvements. Learn from Probely's experience as active ZAP contributors.
LLMs at the Core: From Attention to Action in Scaling Security Teams
Practical insights on leveraging LLMs to automate security processes, enhance SDLC, and improve threat detection. Explore open-source tools for scaling security teams effectively.
Rollout Hardcoded Secrets Detection with Minimum Effort and Maximum Impact
Learn effective strategies for detecting hardcoded secrets in your codebase, minimizing effort while maximizing impact on security and compliance.
Managing Vulnerability Overload with OWASP Tools and Strategies
Discover OWASP's strategies for managing overwhelming security vulnerabilities, enhancing your ability to prioritize and address critical threats effectively.
Modern WAF Bypass Techniques on Large Attack Surfaces
Explore advanced WAF bypass techniques for large attack surfaces with insights from top security researcher Shubham Shah, focusing on complex vulnerabilities and security automation.
Security Automation Done Right - The Holy Grail of Modern Security Operations
Experts discuss leveraging AI and data to optimize security operations, exploring automation's role in incident detection, remediation, and data inventory management amid evolving threats.
Microsoft Sentinel - A Modern Approach to Security Operations
Explore Microsoft Sentinel's AI-powered security operations, featuring live demonstrations of SOC optimization, threat investigation, and advanced response capabilities for modern cybersecurity challenges.
Automating Security Monitoring
Explore efficient security monitoring through automation techniques to handle increasing data volumes, complex architectures, and sophisticated threats while reducing alert fatigue.
Infrastructure as Code, Automation, and Testing in Detection Engineering
Explore detection-as-code for security teams: automate, test, and deploy robust detection systems using Azure DevOps, Microsoft Sentinel, and Defender suite. Improve effectiveness and maintain control across environments.