The Path of DevOps Enlightenment for InfoSec
Explore the convergence of DevOps and Security, addressing industry challenges and providing insights for navigating the evolving landscape of information security.
How to Put the Sec in DevOps - Integrating Security into Automated Software Deployment
Explore integrating security into DevOps processes, overcoming obstacles, enabling automation, and reaping benefits. Learn key strategies for successful AppSec implementation in continuous delivery environments.
SecDevOps: A View from the Trenches
Explore SecDevOps implementation strategies and real-world challenges with insights from industry experience, focusing on practical approaches to integrate security into DevOps workflows.
Continuous Secure Delivery for Infrastructure as Code
Explore best practices for Infrastructure as Code delivery, focusing on speed and security. Learn automated testing, configuration management, and security updates for cloud-native development.
Automating Incident Response
Explore techniques for streamlining and automating incident response processes to enhance cybersecurity efficiency and effectiveness.
Policy-as-Code Across the Stack
Explore Policy-as-Code implementation using open-source frameworks for enhanced security and compliance across the technology stack, reducing manual intervention and improving risk management.
TL;DR: Applying AI to Security - Condensed Overview of AI Applications in Cybersecurity
Explore AI's impact on security: AppSec, red/blue team tactics, threat modeling. Condenses extensive research into practical applications for rapid understanding of AI in cybersecurity.
Streamlining Falco Operations in Production with Falcoctl
Explore Falcoctl's capabilities for streamlining Falco operations in production environments, enhancing security and efficiency in cloud-native systems.
The Long Road to Autonomous Cybersecurity
Explore current research on autonomous cybersecurity systems, including challenges, training environments, and future prospects. Gain insights into AI's role in cybersecurity.
MutableSecurity - Life’s Too Short. Automate Everything!
Explore automation in cybersecurity with MutableSecurity. Learn how to streamline processes, enhance efficiency, and tackle complex security challenges through innovative automation techniques.
DevSecOps - Automating Security in DevOps
Explore automating security in DevOps pipelines, integrating tools, creating a security culture, and preventing critical bugs through DevSecOps implementation and best practices.
DevSecOps State of the Union
Comprehensive overview of DevSecOps best practices, tools, and methodologies. Distills insights from industry leaders to help AppSec teams improve security integration, automation, and culture.
Real-Life Network and Security Automation
Explore network and security automation strategies, from latency monitoring to firewall deployment, with insights on custom scripts, proactive maintenance, and reducing deployment time.
The Final Frontier - Automating Dynamic Security Testing
Automating dynamic security testing: strategies for efficient, scalable DAST integration in software delivery pipelines, addressing challenges and trade-offs for seamless DevSecOps implementation.
Startup Security - Making Everyone Happy
Automating security for startups using open-source tools to integrate dependency, code, and infrastructure protection without impeding progress or increasing developer workload.
From Gates to Guardrails - Alternate Approaches to Product Security
Exploring Netflix's innovative approach to product security, emphasizing automation, DevOps culture, and continuous assessment for agile development in cloud environments.
Security Automation in the Agile SDLC - Real World Cases
Explore real-world examples of implementing successful security automation in fast-paced Agile development environments, focusing on practical strategies and processes.
Lessons Learned from the DevSecOps Trenches
Panel discussion on scaling AppSec programs, featuring insights from security leaders at major tech companies. Covers high-ROI efforts, effective tools, and lessons learned to help organizations improve their security practices.
Lessons from Integrating Third Party Library Scanning in DevOps Workflow
Integrating third-party library scanning in DevOps: automation strategies, architectural choices, and best practices for secure development at scale. Tips for seamless implementation and measuring success.
SCORE Bot - Shift Left, at Scale!
Automated security code review tool for early detection of organization-specific vulnerabilities, integrated with GitHub PR process. Provides real-time feedback and actionable guidance for developers.
Secure Product Lifecycle as a Service
Learn to design, implement, and scale a Secure Product Lifecycle (SPLC) program using automation and security ambassadors. Gain insights from Adobe's successful approach to integrating security into software development.