Engineering for Privacy in Mixed Reality
Explore Mozilla's approach to user privacy in mixed reality, focusing on empowering users through secure immersive web browsing and social VR platform development.
Opening the JAR: The Hitchhiker's Guide to JAR File Dependencies
Explore JAR file dependencies, their complex structures, and various inclusion methods. Learn about edge cases, oddities, and potential vulnerabilities in Java program dependencies.
Serving Millions of Customers with Cloud Native and DevSecOps
Learn how a leading financial organization modernized its infrastructure using cloud-native technologies and DevSecOps practices to serve millions of customers efficiently and securely.
Insights on Re-Architecting to a Single Codebase for Multiple Hardware Platforms
Explore strategies for unifying codebases across diverse hardware platforms using Zephyr OS, enhancing efficiency in multi-product portfolios with common sensor and data functionalities.
Reproducible System Composition Combining Linux, Xen and Zephyr on Embedded Hardware
Explore reproducible system architecture combining Linux, Xen, and Zephyr for complex embedded systems. Learn about prototyping guidelines, documentation, and future developments in system composition.
Running Linux on Tiny Peripherals with Minimal Memory Requirements
Explore running Linux on tiny peripherals with minimal memory, covering device categorization, kernel requirements, and practical implementation strategies.
Automating Architectural Risk Analysis with Open Threat Model Format
Explore automating architectural risk analysis using Open Threat Model format. Learn to create OTM files, integrate threat modeling into DevSecOps, and address challenges in software development security.
Security Design Anti-Patterns: Creating Awareness to Limit Security Debt
Explore security design anti-patterns, their impact on SDLC, and strategies to identify and mitigate them early. Learn to create awareness and limit security debt in software development.
Data Security: Balancing Security and Usability - Tradeoffs and Considerations
Explore tradeoffs in data security, usability, and system architecture. Learn about constraints, information needs, and potential pitfalls in building secure yet functional computer systems.
Insecurity in Information Technology - Impact on Application Security
Explore how personal insecurities and workplace dynamics impact software security. Learn strategies to improve collaboration between developers and security teams for better outcomes.
Indistinguishable from Magic - How the Cybersecurity Market Reached Its Current State
Exploring cybersecurity market growth, this talk examines why increased budgets and resources haven't prevented breaches, proposing a shift towards resilient processes and team practice for improved security outcomes.
The Road to Developers' Hearts - Bridging the Gap Between Security and Software Engineering
Insights on bridging the gap between security professionals and software engineers, based on experience building security software at scale.
When Software Kills: The Therac-25 Radiation Therapy Disaster
Explore the tragic story of the Therac-25 radiation therapy machine, examining software flaws, design issues, and their devastating consequences for patients.
Pandora: Symbolic Validation of SGX
Explore symbolic validation techniques for Intel SGX, enhancing security in confidential computing environments.
The Pursuit of Happiness in Tech Careers
Explore scientific studies on human happiness and apply insights to tech careers. Gain practical strategies for increasing personal and professional well-being in the software industry.
Building a Security Audit Logging System on a Shoestring Budget
Learn to build a robust, security-focused audit logging system for fast-growing companies with limited resources. Discover cost-effective strategies and lessons from combining software engineering and hacker culture.
Code Red: Navigating the Minefield of Security Programming Blunders
Explore infamous security breaches, learn from programming mishaps, and gain practical strategies to enhance cybersecurity in this dynamic session on secure coding practices.
Creating Better Computer Systems by Focusing on Sustainability
Explore practices to increase sustainability in software development, focusing on simple changes to create better, more environmentally-friendly products while improving system performance.
Localized Attractor Computations for Infinite-State Games
Explore symbolic methods for solving infinite-state games, focusing on localized attractor computations in sub-games to enhance efficiency and tackle complex problem instances.
Guider - Automated Performance Monitoring Daemon for Embedded Systems
Automated performance monitoring daemon for embedded systems in Software Defined Vehicles. Monitors, analyzes, and reports issues based on predefined thresholds, enhancing efficiency in complex development cycles.
Supply Chain Shenanigans - Evil npm and Shady NuGet
Explore npm and NuGet supply chain vulnerabilities, uncovering potential threats and security risks in package management ecosystems for software developers and cybersecurity professionals.