Ghosts and Gadgets - Common Buffer Overflows That Still Haunt Our Networks
Explore common buffer overflow vulnerabilities in network systems, their detection methods, and practical mitigation strategies for securing modern networks.
Integrating AI Safely - Automating AI Failure Mode Testing in DevSecOps Pipelines
Discover how to automate AI failure mode testing in DevSecOps pipelines, ensuring secure AI integration through targeted strategies, metrics generation, and automated gates for enhanced application security.
Understanding Software Component Analysis (SCA) in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
Tales of Program Crashes and Vulnerabilities - Software Security Research and Mitigation
Explore software security through vulnerability discovery, exploitation prevention, and compartmentalization strategies to enhance system protection and mitigate potential threats.
Installing and Using Jackalope Fuzzer on MacOS - Finding Vulnerabilities in Simple Programs
Install and use jackalope fuzzer on MacOS to find vulnerabilities in binary programs. Learn cloning, compilation, command options, and practical fuzzing techniques.
Accelerating Fuzzing through Prefix-Guided Execution
Explore prefix-guided execution for accelerating coverage-guided fuzzing, improving bug detection and code coverage in software testing through early termination of unlikely tests.
Obtaining Information Leakage Bounds via Approximate Model Counting
Explore a sound symbolic quantitative information flow analysis for bounding information leakage in programs using approximate model counting and symbolic execution.
jGuard - Programming Misuse-Resilient APIs
Explore jGuard, a Java extension enabling API designers to encode specifications directly, preventing misuse without additional tooling for users. Enhance API resilience effortlessly.
Bridging the Security Tool Gap for Go
Explore automated security fixing for Go, focusing on ICR's precision tools that address vulnerabilities efficiently and save development time.
Substrate Engineering - Foundations for AI-Assisted Development
Explore the importance of substrate engineering in LLM-based tools, focusing on improving programming languages and frameworks for enhanced code reliability and safety.
The Government and the Art of Infrastructure Maintenance
Explore how Germany's Sovereign Tech Fund strengthens the open source ecosystem, addressing funding, career prospects, and contributor growth for sustainable digital infrastructure.
Exploring Essential Security Checks for Open Source Go Projects
Discover essential security tools for Go projects: gosec, govulncheck, and sigstore/cosign. Learn to enhance code security, scan vulnerabilities, and secure the supply chain.
Prioritisation of SCA Findings in Software Dependencies Using Static Reachability Analysis
Explore static and reachability analyses for effective prioritization of software dependency vulnerabilities, enhancing security and productivity in development workflows.
The Role of Foundations in Securing Open Source
Explore the critical role of foundations in enhancing open source security. Gain insights into strategies and best practices for safeguarding open source projects.
Security Testing During Ideation: A Hackathon Perspective
Explore early-stage security testing in hackathons to minimize vulnerabilities, reduce costs, and improve code quality from the ideation phase.
Protecting Kubernetes Resource Manifests in End-to-End Software Development Lifecycle
Secure Kubernetes manifests throughout the software development lifecycle. Learn about integrity protection, signing techniques, and end-to-end supply chain security.
Fuzzing Rekor for Bugs and Vulnerabilities
Explore fuzzing techniques for Rekor, Sigstore's transparency log. Learn about challenges, artifact types, and results from months of testing. Gain insights on third-party security research approaches.
Compiler Options Hardening for C and C++
Explore compiler options to enhance C/C++ program security. Learn about memory-safety issues, mitigation techniques, and the OpenSSF Compiler Options Hardening Guide for informed decision-making.
We Make Python Safer Than Ever
Explore efforts to enhance Python's security, including PyPI audits, improved practices, and community involvement. Learn about challenges, progress, and future plans for a safer ecosystem.
Trusted Publishing: Lessons from PyPI
Explore PyPI's trusted publishing scheme, its OpenID Connect-based authentication, and implementation details. Learn about security improvements and potential applications for other package indices.
Making Python Safer Than Ever
Explore Python ecosystem security improvements, best practices for library maintainers and users, and PSF's efforts to enhance safety in the open-source supply chain.