Security Observability 101 - Thinking Inside the Box
Explore security observability using Java Observability Toolkit (JOT) for runtime instrumentation, analyzing defenses, identifying vulnerabilities, and enforcing policies without coding.
Opening Remarks and Keynote on Application Security - 2022 Global AppSec San Francisco
Explore cybersecurity insights and industry trends with opening remarks and a keynote address by Anna Westelius at the 2022 Global AppSec San Francisco conference.
Trusting Software: Runtime Protection as the Third Alternative
Explore runtime protection as a crucial alternative for software security, offering insights into its implementation and benefits for robust application defense.
Shifting Security from Right to Left
Discover how to integrate security into your development workflow using Snyk's tools in IntelliJ IDEA, enabling early detection and remediation of vulnerabilities in project dependencies.
Hands-on Introduction to Sigstore - Securing the Software Supply Chain
Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.
Log4J Vulnerability (Log4Shell) - Exploitation and Mitigation
Exploración detallada de la vulnerabilidad Log4Shell en Log4J, demostrando técnicas de explotación y mitigación en Apache Solr. Incluye explicación del impacto y gravedad de esta falla crítica de seguridad.
Defense-in-Depth Engineering Techniques for Secure Software Design
Explore techniques for building resilient software, identifying overlooked vulnerabilities, and designing for incident preparedness. Learn to architect secure systems and improve incident response capabilities.
Teach Your SBOM New Tricks with Bomshell
Explore bomshell, a scripting language for SBOM based on CEL. Learn to query, combine, and reshape SBOM documents across formats, enhancing compatibility and streamlining ingestion processes.
Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification
Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.
Cyber Resilience Act Impact on Device Manufacturers
Explore the Cyber Resilience Act's impact on device manufacturers, focusing on cybersecurity requirements, vulnerability management, and compliance strategies.
Understanding the Cyber Resilience Act - Key Obligations and Compliance
Explore the EU's Cyber Resilience Act and its impact on IT industry compliance. Learn key obligations and prepare your organization for upcoming regulatory changes.
Securing Open Source Software with Platform One and Canonical
Explore securing open source software, minimal containers, and security scanning with Platform One and Canonical experts.
Supply Chain Security - The First Steps
Explore supply chain security essentials, including zero trust, SBOMs, and sigstore. Learn to generate and utilize SBOMs to enhance software development security and meet compliance requirements.
Securing Content Distribution with RSTUF, an Incubating OpenSSF Project
Explore RSTUF, an OpenSSF project for securing content distribution. Learn about its implementation, adoption by PyPI and RubyGens, and use in private repositories and Archivista for in-toto attestation storage.
The Current State of Open Source Security Compliance Tooling Is Well, Sad
Explore practical approaches to improve software supply chain security using OpenSSF projects, open source tools, and open data for automated compliance and robust processes.
Increase Security Posture in Software Delivery with Red Hat Trusted Software Supply Chain
Enhance software security with Red Hat's Trusted Supply Chain: protect components, predict vulnerabilities, and improve resilience through advanced tools and practices.
Security Keynote - Open Source Software and Cybersecurity
Explore cybersecurity insights and strategies with Dr. Allen Friedman's keynote address on critical security challenges and solutions in the digital landscape.
Designing Security and Privacy - A Developer's Guide to Threat Modeling with OWASP SAMM
Learn threat modeling techniques using OWASP SAMM to enhance security and privacy in software development, empowering developers to identify and mitigate potential risks effectively.
Transitive Vulnerabilities Exploit in Real-life
Explore real-world transitive vulnerability exploits with security experts, gaining insights into complex attack chains and practical defense strategies for robust system protection.
Managing Vulnerability Overload with OWASP Tools and Strategies
Discover OWASP's strategies for managing overwhelming security vulnerabilities, enhancing your ability to prioritize and address critical threats effectively.
AI Package Hallucination - Spreading Malicious Packages Using Generative AI
Explore how generative AI can be exploited to create and spread malicious software packages, highlighting potential cybersecurity risks and defense strategies.