Infrastructure of Wikipedia - 36C3 Wikipaka WG
Explore Wikipedia's infrastructure: serving 100k requests/second, protecting user privacy, and running on donations. Learn about system architecture, databases, caching, and more.
Kernel Tracing With EBPF
Explore Linux kernel tracing with eBPF: learn practical uses, dynamic instrumentation techniques, and insights into system workings. Gain knowledge to monitor actions and reveal process secrets efficiently.
You Fail in SE If You Make Those Mistakes - DefCamp - 2017
Explore common mistakes in social engineering, learn prevention strategies, and understand the psychology behind successful attacks. Gain insights to enhance your cybersecurity awareness and defense techniques.
From Threat Intelligence to Rapsheets in Just a Few Steps - DefCamp - 2016
Explore threat intelligence transformation into actionable data using innovative techniques like honeypots, passive DNS, and graph-based models for enhanced cybersecurity analysis and decision-making.
Handling of Security Requirements in Software Development Lifecycle
Explore handling security requirements throughout software development, covering scalability, use cases, and practical demonstrations with insights on data protection and integration.
SAP BusinessObjects Attacks
Explore SAP BusinessObjects vulnerabilities, architecture, and attack vectors. Learn about security recommendations and potential issues through demonstrations and in-depth analysis.
Witness the Russian Attack - Live Demos of Their Steps, Tools, Techniques
Explore Russian cyberattack techniques through live demonstrations, covering infection methods, web injects, traffic manipulation, and victim targeting strategies.
The Foundation Is Rotting and the Basement Is Flooding
Explore critical vulnerabilities in computing foundations and their impact on security. Learn about technical debt, low-level attacks, and strategies to address information security challenges.
Shifting Left- Raise Your Security Bar! - Guido Rajngewerc & Martin Cuesta - Ekoparty Security Conference - 2020
Integración de seguridad en el ciclo de desarrollo ágil: herramientas y estrategias para detectar vulnerabilidades temprano, empoderando a los desarrolladores como actores clave en la seguridad del producto.
10 Mio€ für Open Source - Jedes Jahr
Einblicke in die Struktur und Bedeutung von Open-Source-Projekten für die Sicherheit sowie Vorschlag eines öffentlichen Fonds zur finanziellen Förderung mit 10 Mio € jährlich zur Absicherung wichtiger Projekte.
Beweisbar sichere Software
Überblick über verifizierbare Programmiersprachen und Theorembeweiser zur Entwicklung beweisbar sicherer Software. Vergleich verschiedener Ansätze anhand von Beispielen.
Simplifying Threat Modeling
Simplified approach to threat modeling: identify attack surfaces, visualize users as threats, illuminate assets and trust boundaries, postulate attacks, evaluate impact, and mitigate risks.
Improve Your SDLC with CAPEC and CWE
Enhance software development lifecycle using CAPEC and CWE. Learn threat modeling, design considerations, and security testing techniques to improve application security.
Securing Modern API and Microservice Based Applications by Design
Learn to secure modern API and microservices architectures with expert insights on key concerns, architectural patterns, and actionable solutions for robust application security.
Adapting Your AppSec
Explore strategies for integrating application security into modern development processes without hindering progress. Learn about tooling, assessments, and agile methodologies for effective security implementation.
Railsgoat - Rails Attack and Defense
Explore RailsGoat, an OWASP project for Rails security training. Learn common vulnerabilities, remediation techniques, and attack scenarios aligned with the OWASP Top 10 using a purposely vulnerable Rails application.
Designing Flexibility in Software to Increase Security
Explore designing flexible software architecture to enhance security, adapt to changes, and prevent vulnerabilities. Learn from real-world examples and gain practical tips for writing better, more adaptable code.
Threat Model Every Story - Practical Continuous Threat Modeling Work for Your Team
Explore continuous threat modeling for agile teams, focusing on collaborative methodologies and the PyTM open-source tool to enhance product security throughout development.
A New Framework to Automate MSTG and MASVS in Your CI/CD Pipeline
Automate mobile app security testing using BDD and UI automation frameworks. Integrate OWASP MASVS/MSTG into CI/CD pipelines for faster, repeatable security checks at DevOps speed.
SecDevOps - Current Research and Best Practices
Explore current research and best practices in SecDevOps, covering static and dynamic analysis, security scaling, and infrastructure best practices for improved application security.
Authentication Without Authentication
Explore IoT app authentication without user interaction. Learn innovative solutions for secure device communication, demonstrated on a Raspberry Pi.