Software Security Cryptography
Learn cryptography essentials for software security, including encryption, data management, and handling sensitive information. Explore threat modeling and prioritize security investments.
Rethinking the Trust Chain - Auditing OpenSSL and Beyond
Explore software security, trust chains, and OpenSSL auditing. Learn about emerging threats and gain insights into network transport integrity and certificate deployment challenges.
Lessons Learned from Implementing Software Security Programs
Insights on implementing software security programs, covering challenges, training, threat modeling, design reviews, testing, vendor management, and metrics for effective cybersecurity strategies.
Secure Test Driven Development - Brakeman - Gauntlet - OWASP and the Work Still to Be Done
Explore secure test-driven development using Brakeman and Gauntlet, discussing OWASP principles and future challenges in software security.
Crash the IoT Train Yourself - Intentionally Vulnerable WRT IV WRT
Explore IoT device vulnerabilities, including firmware backdoors, default credentials, and web interface flaws. Learn about common security risks and see live demonstrations of exploits.
Formal Verification of Secure Software Systems
Explore formal verification techniques for secure software systems, focusing on collaboration between security and development teams to enhance software quality and security.
Formal Verification of Secure Software Systems
Explore formal verification techniques for secure software systems, enhancing code reliability and security through mathematical proofs and rigorous analysis methods.
Binary Defense Without Privilege
Learn techniques for implementing binary defense without privileged access, covering code patching, stack overflow prevention, sandboxing, and network filtering.
IoT Defenses - Software, Hardware, Wireless, and Cloud
Explore comprehensive IoT security strategies across software, hardware, wireless, and cloud domains, enhancing your ability to protect interconnected devices and systems.
Every Day Is a Zero Day - Building an In-House Secure SDLC Program
Learn to build an in-house Secure Software Development Life Cycle program, covering key components, implementation strategies, and success metrics for enhancing organizational security.
Automating Security in Building Software
Explore automating security in software development, covering DevOps, continuous integration, automated scanning, and organizational change for improved cybersecurity practices.
Lessons Learned Implementing SDLC and How To Do It Better
Insights on implementing SDLC effectively, covering management buy-in, security awareness, threat modeling, code review, and testing for better software development practices.
Patchable Indistinguishability Obfuscation iO for Evolving Software
Explore indistinguishability obfuscation for evolving software, focusing on patchable techniques, multi-program applications, and cryptographic implications in this advanced cryptography presentation.
Advances in Computer Aided Cryptography
Explore advances in computer-aided cryptography, including tools like EasyCrypt, decoupling techniques, and applications in compiler verification and differential power analysis.
Implementing Physical Units Library for C++
Explore challenges and solutions in designing a Physical Units Library for C++, leveraging C++20 features for improved usability, maintainability, and extensibility.
Make Your Programs More Reliable with Fuzzing
Explore fuzzing techniques to enhance program reliability when handling external data. Learn about its history, current tools, and real-world applications in libc++ and Boost.
Do You Want Fries With That? From Punched Cards to DevOps and Beyond
Explore software development's evolution from punched cards to DevOps, examining why security is often seen as an 'extra' responsibility and celebrating developers' adaptability across eras.
It's a Jungle Out There - What's Really Going on Inside Your Node_Modules Folder
Explore the hidden dangers in node_modules folders, recent software supply chain attacks, and learn concrete steps to protect your team from emerging threats in the JavaScript ecosystem.
C-C++ vs Security
Explore security vulnerabilities, pitfalls, and unexpected behaviors in C/C++ programming from a researcher's perspective. Learn about classical and lesser-known bugs in software development.
Implementing Innovations in a Safe and Secure Way
Explore automated static code analysis for software safety and security. Learn to prove absence of runtime errors using formal methods and tools like Polyspace for exhaustive testing.
Secure Software Supply Chains for Python
Explore Python software supply chain security, including common attacks, protective measures, and tools. Learn about ecosystem improvements for enhanced security in third-party package integration.