Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities
Explore strategies for mitigating open source software vulnerabilities, including supply chain attacks, SBOMs, and next-generation security controls for robust defense and compromise resilience.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification
Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.
Web Application Security: The Secret to Hack-Proof Apps - SQL Injection - Part 2
Discover step-by-step methods to secure web applications from SQL injection threats. Learn to identify vulnerabilities, exploit techniques, and implement effective prevention strategies for robust security.
Secured Open-Source Linux for Electric Vehicle Supply Equipment (EVSE)
Explore security challenges, vulnerabilities, and standards for electric vehicle charging stations, and learn how to address them with open-source Linux solutions.
BuildSafe Deep Dive - Getting Supply Chain Security Right Using Nix
Explore BuildSafe's capabilities for secure application builds using Nix, including package search, CVE information, and simplified development workflows.
Supply Chain Security - The First Steps
Explore supply chain security essentials, including zero trust, SBOMs, and sigstore. Learn to generate and utilize SBOMs to enhance software development security and meet compliance requirements.
Inside Apple's Lightning: JTAGging the iPhone for Fuzzing and Profit
Explore Apple's Lightning protocol, learn iPhone JTAGging techniques, and discover fuzzing methods for potential vulnerabilities and profit.
Exploit Engineering: Attacking the Linux Kernel
Explore Linux kernel exploitation techniques, from attack surface mapping to vulnerability discovery and exploit development. Gain insights into advanced kernel exploitation methods and tools.
Changing and Unchanged Things in Vulnerability Research
Explore vulnerability research evolution, from buffer overflows to advanced fuzzing and exploit mitigations. Analyze case studies and future trends in offensive and defensive security strategies.
Advancements in JavaScript Engine Fuzzing - OffensiveCon 2023
Explore advancements in JavaScript engine fuzzing, covering techniques like splicing, code coverage, and hybrid engines to enhance bug discovery and security testing.
The Print Spooler Bug that Wasn't in the Print Spooler
Explore a unique Windows vulnerability discovery, from initial bug report to full exploit chain, with insights on Microsoft's patch process and security implications.
Managing Vulnerabilities in Open-Source Dependencies
Learn strategies to secure open-source dependencies, evaluate software composition analysis tools, and shift from reactive to proactive security postures in product development.
Securing Web Applications: Integrating OWASP with Burp Suite
Integrate OWASP tools with Burp Suite to identify vulnerabilities, conduct security assessments, and implement effective mitigation strategies for web applications.
Securing Digital Frontiers: Leveraging Keycloak for Comprehensive Application Security
Explore Red Hat's Keycloak for robust identity and access management in diverse deployment environments, ensuring application security and mitigating financial risks.
Secure Your App: DevSecOps Trusted Application Supply Chain
Explore DevSecOps principles and implement a trusted application supply chain to enhance app security and streamline development processes.
Opensource Code Linting for Chip Design and Verification
Explore open-source code linting techniques for chip design and verification, enhancing quality and efficiency in semiconductor development processes.
Security Keynote - Open Source Software and Cybersecurity
Explore cybersecurity insights and strategies with Dr. Allen Friedman's keynote address on critical security challenges and solutions in the digital landscape.
Creating the Right Developer Community for Your Company
Explore strategies for building effective developer communities tailored to your company's growth stage. Learn to make informed decisions for community expansion and strengthening.
The Power of Cross Community Collaboration
Discover strategies for effective cross-community partnerships in open-source projects. Learn co-product development, marketing, leveraging expertise, measuring success, and avoiding pitfalls.
Acknowledging Women's Contributions in the Python Community Through Podcast
Exploring efforts to improve diversity in Python podcasts, highlighting women's contributions and discussing strategies to enhance representation in the community.