Navigating Turbulent Waters of AI - Building a Secure and Safe Foundation
Explore the challenges of integrating generative AI in software development while maintaining security. Learn strategies for building a secure foundation and safeguarding against emerging threats in this rapidly evolving landscape.
Automated Cryptanalysis in Cryptography - Session 1
Explore cutting-edge techniques in automated cryptanalysis, focusing on advanced algorithms and tools for breaking cryptographic systems. Gain insights into the latest research and developments in this critical field of cybersecurity.
Insights from Zephyr Security Audit and Vulnerability Experiences
Explore Zephyr's security evolution through vulnerability analysis and external audit findings. Gain practical insights to enhance embedded system security in your projects.
Building the Software Supply Chain on Docker Official Images
Explore Docker's approach to securing the software supply chain, focusing on Official Images and integrating tools like SBOMs, cryptographic signing, and verification for enhanced developer security.
The State of Morello Software and Projects - POCL'24
Explore the current landscape of Morello software and ongoing projects, gaining insights into the latest developments and advancements in this field.
The Case for Software Bill of Materials
Explore the importance of Software Bill of Materials in cybersecurity, its implementation challenges, and potential benefits for software transparency and risk management.
SolarWinds One Year Later - The Story of an Unauthenticated RCE in the Orion Platform
Explore the aftermath of the SolarWinds breach, focusing on an unauthenticated remote code execution vulnerability in the Orion Platform. Gain insights into cybersecurity implications and lessons learned.
GNU Anastasis - Privacy-Preserving Key Backup And Recovery
Explore GNU Anastasis, a privacy-focused key backup and recovery system. Learn about its cryptographic design, system architecture, and integration possibilities for enhanced digital security and self-custody solutions.
High-Assurance Code Reviews - How Consulting Works When the Risks Are High
Insights into high-stakes code reviews for critical software. Learn techniques for rapid, effective security assessments of cryptographic libraries, cloud-native software, and smart contracts from Trail of Bits' CEO.
The Quest to Memory Safety
Exploración de vulnerabilidades de memoria y estrategias para prevenirlas, enfocándose en limitaciones de lenguajes de programación y mejoras necesarias para desarrollar código más seguro.
Sleeping with the Enemy Compiler - Software Vulnerabilities Caused by Optimizations
Técnicas de optimización del compilador pueden introducir vulnerabilidades en software de seguridad. Se presentan ejemplos, demostraciones en vivo y soluciones para evitar estos problemas causados por optimizaciones.
How to Rate the Security of Closed Source Software
Learn techniques to evaluate and assess the security of closed source software without access to the source code.
Tu Propia Emisora de Números Espía - Radio Space
Explora la creación de emisoras de números y técnicas de exfiltración de datos con Simon Roses Femerling, experto en ciberseguridad y fundador de VULNEX. Descubre los secretos de las comunicaciones encubiertas.
Securing the Software
Expert panel discusses strategies and challenges in software security, offering insights for industry professionals and organizations to enhance their cybersecurity practices.
Safe and Secure Drivers in High-Level Languages
Explore writing PCIe drivers in modern languages like Rust and Go, focusing on safety, security, and performance. Learn techniques for user-space implementation and hardware isolation.
Supply Chain Security in the Software Era
Explore software supply chain risks and gain insights on mitigating them through real-world examples and concrete recommendations for policy makers and executives.
What Makes Software Exploitation Hard?
Explore Project Zero's mission to make zero-day vulnerabilities harder, discussing technologies and trends that have increased difficulty in vulnerability discovery and exploitation.
Understanding Trust and Security Processes in the Open Source Software Ecosystem
Explores security challenges in open source software, including code review, dependency management, and trust issues. Shares insights from interviews and offers practical advice for improving supply chain security.
CVE-Search
Explore CVE-Search, a free tool for collecting, searching, and analyzing software vulnerabilities. Learn how to enhance your cybersecurity practices with this powerful open-source solution.
Why Security-as-a-Feature Will Never Happen
Explore why secure coding remains elusive, examining cultural issues, industry challenges, and potential solutions for integrating security into software development practices.
Regions Are Types, Types Are Policy, and Other Ramblings
Explore innovative software hardening using typed region-based policies. Learn how to apply this approach to protect against vulnerabilities and enhance system security beyond traditional compiler techniques.