A Beginner's View of Public Instances
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.
Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development.
Security as a Culture: The Distributed Advocacy Approach
Explore distributed advocacy in cybersecurity, integrating security into development processes. Learn how to foster collaboration between security advocates and developers for enhanced system protection.
Sigstore: Past, Present and Future Directions
Explore Sigstore's journey, impact on OSS code signing, and future plans. Learn about its adoption by major projects and integration efforts with package managers.
Maximizing Benefits of Neurodiversity in Software Development and Supporting Neurodivergent Developers
Explore strategies for leveraging neurodiversity in software teams, supporting neurodivergent developers, and fostering an inclusive work environment that benefits from diverse perspectives.
GRC Engineering - Bringing Governance, Risk, and Compliance to Your Git Repositories
Explore innovative approaches to integrate Governance, Risk, and Compliance directly into git repositories, revolutionizing how organizations handle compliance and security challenges.
OWASP Low-Code/No-Code Top 10 - LCNC Security Risks
Explore the top 10 security risks in low-code/no-code platforms with expert Michael Bargury, gaining insights to protect your applications and data in this rapidly evolving landscape.
OWASP Cornucopia - Introduction to Application Security Card Game
Explore OWASP Cornucopia, a card game designed to help software developers identify security requirements in web applications, with expert insights from Johan Sydseter.
OWASP DefectDojo - Introduction and Overview
Learn about DefectDojo, an open-source application vulnerability management tool. Discover its features for streamlining security testing workflows and enhancing vulnerability tracking and remediation processes.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
How Hacking Works - Web Edition
Explore web exploitation techniques and tools to enhance software security. Learn through gamified environments to build skills for safer development practices.
Threat Modeling at Scale: More Than Shifting Left
Empower developers with scalable threat modeling techniques to enhance application security, save time and money, and make secure development more attainable.
Rolling out the C2 - Modern Red Team Infrastructure in 2024
Explore modern red team infrastructure setup using Azure Cloud, Tailscale VPN, GitLab, and containerization. Learn to deploy secure C2 systems for effective penetration testing and security assessments.
BOLABuster: Harnessing LLMs for Automating BOLA Detection
Harnessing LLMs to automate BOLA detection in APIs and web applications, reducing requests by 99% while uncovering critical vulnerabilities and submitting multiple CVEs.
101 Things Your Application is Doing Without Your Knowledge
Uncover hidden behaviors in your applications, including unexpected file operations and network connections, even when using trusted dependencies. Learn to identify and manage these covert activities.
Standardizing Password Surveys - Improving Reliability and Comparability
Standardizing password surveys to improve reliability and enable cross-organizational comparisons. Open-source initiative for better data collection and analysis in password security research.
My Autistic Life - Working at Microsoft in the 1990s
Explore the impact of undiagnosed autism on a career at Microsoft in the 1990s, offering insights into neurodiversity in the tech industry.
Practical Steps to False Positive Reduction and Benign File Analysis
Learn efficient techniques for identifying false positives and analyzing clean files in malware analysis. Gain actionable tips from real-world examples to enhance your workflow and save time and resources.
From ASCII to UTF-16: Leveraging Encodings to Break Software
Explore how character encodings can be exploited to compromise software security, from basic ASCII to complex UTF-16, in this technical IT security talk.
Open Source Vulnerability Management for Software Development and Cloud Environments
Explore open source vulnerability management strategies for software development and cloud environments in this IT security conference talk by Stefan Fleckenstein at TROOPERS24.
AI, IP, and Your Code - What Developers Need to Know
Explore legal implications of AI-generated code, including ownership, open-source usage, and intellectual property rights. Gain insights into navigating the complex legal landscape for developers.