Perfidious - Make PE Backdooring Great Again
Explore PErfidious, a Python tool for PE file manipulation and shellcode injection. Learn about its capabilities in bypassing endpoint detection systems and its potential as a modern PE file analysis library.
SBOM - Screw It, We'll Do It Live!
Exploring Software Bill of Materials (SBOM) concept, its potential impact on software supply chain transparency, and its crucial role in enhancing healthcare sector security. Insights on implementation and overcoming reluctance.
Quantitative Comparable Software Risk Reporting
Automated analysis frameworks for assessing software security, empowering consumers and professionals with scientific data on effectiveness of security techniques and overall product safety.
Logrotten - It's Not a Bug
Sicherheitslücke in Logrotate: Ausnutzung, Auswirkungen und Reichweite. Demonstration der Schwachstelle, Einfluss auf andere Softwarepakete und aktueller Stand von Logrotate werden diskutiert.
The Code That Never Ran - Modeling Attacks on Speculative Evaluation
Modeling speculative evaluation attacks like Spectre using pomsets. Proposes abstract model to express known attacks, verify countermeasures, and predict new compiler optimization-based vulnerabilities.
Patterns, Trends And Practices In Software Security
Explore key patterns, trends, and best practices in software security with insights from industry expert Elisa Cavatorta. Gain valuable knowledge to enhance your cybersecurity strategies.
Measuring Adversary Costs to Exploit Commercial Software
Quantitative analysis of software security across platforms, revealing surprising insights for informed decision-making in product selection and vulnerability assessment.
Intra-Process Memory Protection for Applications on ARM and X86 - Leveraging the ELF ABI
Explore intra-process memory protection techniques for ARM and X86 architectures using ELF ABI. Learn about ELFbac system implementation, policy enforcement, and practical applications in software security.
Technical Debt - A Guide for Developers and IT Managers
Aprenda a identificar, gerenciar e prevenir dívidas técnicas em sistemas de software. Descubra estratégias para manter seu aplicativo confiável, seguro e lucrativo a longo prazo.
Protect Your Code with GitHub Security Features
Learn to protect your code using GitHub's security features, including signed commits, Dependabot, vulnerability scanning, secret detection, and CodeQL for comprehensive software security.
Building Secure Software with OWASP
Explore OWASP's free tools and guides for enhancing software security, from explicit requirements to secure development and verification, presented by an experienced OWASP contributor.
Cracking the Code to Secure Software
Learn principles from Domain Driven Design to create secure code while focusing on business features. Discover how to use Domain Primitives, Entity Snapshots, and security testing to harden your code and prevent Domain DoS attacks.
Space Odyssey - An Experimental Software Security Analysis of Satellites
Explore experimental software security analysis techniques for satellites, uncovering vulnerabilities and discussing potential implications for space-based systems and infrastructure.
Find and Track the Hidden Vulnerabilities Inside Your Dependencies
Learn to detect and manage hidden vulnerabilities in open-source dependencies using tools like OWASP DependencyCheck and DependencyTrack, creating a Continuous Security pipeline for DevSecOps practices.
The Silence of the Lambs - Inspecting Source Code and Binaries
Explore DevOps tools for inspecting Java source code and Docker images in Continuous Delivery pipelines, focusing on security and quality gates with SonarQube and Twistlock.
Creating Secure Software - Benefits from Cloud Thinking
Explore how cloud-native design patterns enhance software security, covering configuration, statelessness, logging, and automation for both legacy and new development.
We Are a Startup to the Core - A Qualitative Interview Study on the Security and Privacy Development Practices in Turkish Software Startups
Explore security and privacy practices in Turkish software startups through qualitative interviews, revealing insights into development approaches and challenges.
WarpAttack - Bypassing CFI through Compiler-Introduced Double-Fetches
Explore a novel attack technique that exploits compiler-introduced vulnerabilities to bypass Control Flow Integrity, uncovering potential security risks in modern software systems.
GraphSPD - Graph-Based Security Patch Detection with Enriched Code Semantics
Explore a novel graph-based approach for detecting security patches in software, leveraging enriched code semantics to enhance accuracy and efficiency in vulnerability management.
Secure Coding Patterns
Explore secure coding practices and learn to make trust a first-class citizen in your applications. Gain insights on developing with a security-focused mindset for robust software.
There and Back Again - Software Security in the 21st Century
Explore software security evolution with Brian Chess, from pre-security era to modern challenges. Gain insights on industry shifts and future trends in cybersecurity.