Addressing Cybersecurity Challenges in Open Source Software - June 29, 2022
Explore cybersecurity challenges in open source software, focusing on organizational priorities, improvement strategies, and policy drivers. Gain insights from Snyk and Linux Foundation research.
Addressing Cybersecurity Challenges in Open Source Software
Insights on addressing cybersecurity challenges in open source software, including organizational priorities, improvement strategies, and policy drivers. Live panel discussion of key findings from Snyk and Linux Foundation research.
Insecurity in Information Technology - Impact on Application Security
Explore how personal insecurities and workplace dynamics impact software security. Learn strategies to improve collaboration between developers and security teams for better outcomes.
How Visibility and Segmentation Can Improve Your Sleep - Cybersecurity for IT and OT Environments
Explore strategies for better cybersecurity through risk assessment, environment separation, and simplified policies, leading to improved peace of mind in IT and OT landscapes.
First Principles: Robust Data Breach Protection with OCI Zero Trust Packet Routing
Explore OCI Zero Trust Packet Routing, a revolutionary solution that embeds security policies into the network layer, preventing data breaches caused by misconfigurations and ensuring robust protection against evolving threats.
From Static to Dynamic Access Control Policies via Attribute-Based Category Mining
Explore attribute-based category mining for dynamic access control policies, transitioning from static approaches in cybersecurity.
What the Required MFA Announcement Really Means for Entra
Explore the implications of Microsoft's required MFA announcement for Entra, covering impacts, exceptions, timelines, and best practices for authentication and identity management.
Tetragon: eBPF-Based Security Observability and Runtime Enforcement Tool
Explore Cilium's Tetragon: a powerful eBPF-based tool for real-time security observability and runtime enforcement in Linux systems. Learn its design and practical applications.
Plan, Implement, and Administer Conditional Access - LRN252
Learn to implement and manage conditional access policies for enhanced security control, including security defaults, application controls, and session management.
The Long and Windy Road to Cloud Native Security
Explore cloud-native security strategies, from leadership buy-in to InfoSec collaboration. Learn to establish scalable programs, engage with organizational structures, and leverage upstream communities for guidance.
Leveraging Envoy for Micro-Segmentation Security Policies in Financial Services
Explore how Envoy implements micro-segmentation security policies, enhancing authentication, authorization, and token exchange in complex environments while improving performance and cost-efficiency.
OAuth and Mandatory Access Control: Beyond Discretionary Access Control - Lecture 4
Explores OAuth's limitations in mandatory access control, discussing industry extensions and the need for standardization beyond RBAC for comprehensive security policy enforcement.
How the Latest MASVS and MSTG Specs Enhance Mobile Penetration Testing
Explore mobile security challenges, attack surfaces, and best practices using OWASP guidelines. Learn to leverage tools and frameworks for effective mobile app security testing and policy development.
Fine-grained Authorization in Containerized Environments Using Open Policy Agent
Explore fine-grained authorization using Open Policy Agent (OPA) for containerized environments, focusing on policy enforcement in Kubernetes without modifying core components.
CNI or Service Mesh? Comparing Security Policies Across Cloud Native Networking Solutions
Explore recent changes in cloud native networking solutions, comparing CNI and service mesh implementations for security policies, and understanding trade-offs between different approaches.
Extending Kube-Apiserver with WebAssembly - A Prototype
Explore extending Kubernetes API Server with WebAssembly as an alternative to Dynamic Admission Controllers. Learn about a prototype, potential benefits, and challenges in this innovative approach.
Integrations 101
Comprehensive guide to Snyk integrations, covering IDE setup, CLI usage, Git onboarding, Jira integration, and reporting. Ideal for new users and administrators seeking to enhance security in their development pipeline.
Building and Maintaining Your Own Secure Container OS
Explore Bottlerocket: a secure, flexible Linux OS for containers. Learn build processes, customizations, and advanced features for enhanced container management and security.
Generating Security Policies with eBPF - Hands-on Walkthrough
Explore eBPF-based solutions for capturing security events and generating policies. Learn to leverage tools like seccomp, Inspektor Gadget, and Tetragon for comprehensive system protection.
Secure Multicluster Istio Configuration Using GitOps Patterns
Explore secure multicluster Istio configuration using GitOps patterns. Learn to manage production Istio deployments, enforce security policies, and enable developer self-service with Argo CD and Argo Rollouts.
Secure Multicluster Istio Configuration Using GitOps Patterns
Explore secure multicluster Istio configuration using GitOps patterns. Learn to manage production Istio deployments, enforce security policies, and enable developer self-service with Argo CD and Argo Rollouts.