Securing Robots at Scale
Explore robot security challenges, attack surfaces, and protection strategies for hardware, software, and user privacy in the era of widespread robotic adoption.
Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
Testing Security the Right Way
Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.
High-Assurance Crypto Software
Exploración de criptografía de alta seguridad: ataques de tiempo, software de tiempo constante y herramientas de ingeniería inversa para verificar implementaciones criptográficas.
The Layman's Guide to Zero-Day Engineering
Demystifying zero-day exploit development: insights into the engineering process, analytical approaches, and misconceptions. Contrasts with CTF challenges and guides aspiring security professionals.
Follow the Money - DefCamp - 2016
Explore the evolution of cybersecurity, from its origins to future trends. Gain insights into industry transformations, fundraising, acquisitions, and emerging patterns in information security.
Playing in the Sandbox - Bypassing Adobe Flash Input Validation
Explore Adobe Flash sandbox vulnerabilities, focusing on input validation flaws in file path handling. Learn about local and remote sandbox escapes, their implications, and broader security considerations.
Security Model Bedfellows
Explore how integrating security, legal, and procurement can enhance software security from the start, reducing vulnerabilities and improving vendor accountability in the development process.
The Limits of Sandboxing and Next Steps
Exploring sandboxing limitations in Chrome security, discussing OS constraints, and introducing memory safety as a complementary approach to enhance software resilience.
The State of Reproducible Builds - Arch Conf 2020
Explore progress in Arch Linux's reproducible builds, current tooling, rebuilder software, and challenges in ensuring source code integrity and binary artifact distribution.
Leveraging the Power of Automated Reasoning - USENIX Enigma Conference - 2017
Explores automated bug detection and security exploit generation using symbolic execution and SMT solvers, showcasing their application in Web security analysis and potential for broader automation.
You're Going to Need a Bigger Shovel
Explore software security assurance, application security, and organizational strategies for effective resource planning and process building in cybersecurity.
Do Certain Types of Developers or Teams Write More Secure Code?
Explore factors influencing secure code development, including developer experience, team dynamics, and work environment. Learn how human and environmental elements impact software security.
It Was Broken When It Got Here - Security in Your Software Procurement Process
Explore strategies for ensuring security in third-party software procurement, including case studies of vulnerabilities and guidance for integrating security considerations into the purchasing process.
Rugged Software Engineering
Practical strategies for rapid and secure software development, addressing challenges in modern engineering organizations and emphasizing rugged software practices.
Everything Useful I Learned About Software Security, I Learned at Microsoft
Discover key software security insights from Michael Howard's 18-year Microsoft journey, covering depreciation, friction reduction, network security, and practical strategies for robust development.
Designing Flexibility in Software to Increase Security
Explore designing flexible software architecture to enhance security, adapt to changes, and prevent vulnerabilities. Learn from real-world examples and gain practical tips for writing better, more adaptable code.
Building Secure Software With OWASP Tools and Guides
Explore OWASP's comprehensive tools and guides for building secure software throughout the development lifecycle, from policy creation to implementation and verification.
Secure Product Lifecycle as a Service
Learn to design, implement, and scale a Secure Product Lifecycle (SPLC) program using automation and security ambassadors. Gain insights from Adobe's successful approach to integrating security into software development.
Injecting Security Controls in Software Applications
Explore techniques for integrating security controls into software development, focusing on real-world examples, actionable advice, and verification methods to build more secure applications.
Bringing Rapid Prototyping to the Threat Model Process
Discover rapid threat modeling for Agile/DevOps environments, enhancing software security design tenfold through efficient risk analysis and automated workflows.