ReproNow - Save Time Reproducing and Triaging Security Bugs
Discover ReproNow, an open-source tool streamlining security bug reproduction and triage. Learn how this browser extension captures vulnerability walkthroughs, saving time for security engineers and enhancing bug bounty programs.
Applying Security Engineering Principles to Complex Composite Systems
Explore security engineering principles for complex systems, focusing on composite elements, interactions, and dependencies across the system lifecycle, illustrated with a Smart City transit example.
Dissecting Mobile Application Privacy and Analytics
Explore mobile app data collection, privacy concerns, and analytics practices. Learn to assess and safeguard personal and client information in popular applications.
AppArmor
Explore AppArmor's security features, development process, and integration with LxD, guided by Canonical security expert John Johansen.
Honeypots for Active Defense
Explore active defense strategies using honeypots. Learn about various honeypot types, implementation techniques, and tools for enhancing network security and threat intelligence.
Level Up Your Career - A Panel on Staff+ Engineering
Expert panel discusses transitioning from Senior to Staff+ engineering in security, offering insights on career advancement and answering audience questions about high-level roles in cybersecurity.
Hiring and Interviewing as Security Engineers
Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.
Password Hashing - The Future is Now
Explore the future of password hashing, its challenges, and the Password Hashing Competition initiative to develop improved methods for securing digital systems.
Container Security
Explore container security fundamentals, shared kernel implications, and best practices with experts Liz Rice and Eoin Woods. Learn to assess and mitigate risks in containerized applications.
Building a Modern Security Engineering Organization
Learn strategies for building an effective security engineering team, focusing on modern approaches to protect against evolving threats in today's dynamic technology landscape.
Its Too Funky In Here - IDS - IPS Choices Benefits Drawback and Configurations ForgottenSec
Explore IDS/IPS systems, their benefits, drawbacks, and configurations. Learn about security engineering, deployment strategies, and future steps in network security monitoring.
Auditing Hooks and Security Transparency for CPython
Explore CPython's new security features: auditing hooks and verified open call. Learn how to detect and prevent malicious use of Python, integrating with OS security frameworks.
Sherlock - OpenSource Platform for Applying LLMs to Security Use Cases
Explore Sherlock: an open-source platform leveraging LLMs for security applications. Learn about its configurable features and potential impact on cybersecurity practices.
Noobs - Training the Next Generation of Security Engineers
Discover strategies for effectively training and mentoring new security engineers, fostering their growth and success in the rapidly evolving cybersecurity landscape.
Engineers and Exploits: The Quest for Security
Dive into the intersection of engineering and security exploits, exploring critical vulnerabilities and defensive strategies with security experts Spyros Gasteratos and Andra.
Differential Privacy Beyond Algorithm: Challenges for Deployment
Explore the practical challenges of implementing differential privacy systems, from explaining technical guarantees to non-experts to preventing misuse and integrating with existing security tools.
Safecracking Fundamentals: Understanding Mechanical Combination Safe Locks
Master the art of mechanical safe manipulation through expert techniques, wheel isolation methods, and vulnerability analysis for Group 2 locks, enhancing your locksport knowledge.
Securing Frontends at Scale - Paving the Way to Post-XSS World
Discover cutting-edge strategies for defending against XSS vulnerabilities, exploring Google's proven security implementations and future-focused approaches for protecting web applications at scale.
From Novice to Catalyst - Scaling Security Tools with Metrics
Discover how to implement and scale security metrics effectively, from data extraction to visualization, while learning to leverage the Multivac framework for enhanced threat management and risk reduction.
Rugged - Being Secure and Agile
Explore how agile methodologies can enhance system security through continuous delivery, team-based decision making, and integrated security practices in software development.
Novel Sandboxing Techniques for Open Source Libraries Using eBPF and KRSI
Discover how to implement advanced sandboxing techniques for open source libraries using eBPF and KRSI technologies to enhance security and protect against vulnerabilities and exploits.