Drive Your Business With Open Source Sponsorship
Discover how to implement effective open source sponsorship programs at the corporate level, focusing on practical strategies and real-world experiences from Mercedes-Benz.
Bringing HawkBit to Production - Implementing IoT Software Updates at Scale
Discover essential insights for deploying Eclipse hawkBit in production environments, covering security, scalability, and advanced features for IoT device software updates.
Building High-Secure Applications with Eclipse Serializer
Discover how to eliminate deserialization attacks and enhance Java application security using Eclipse Serializer, addressing critical vulnerabilities in traditional serialization methods.
See Yourself in Cyber - Security Teams and AI in the Cloud Era
Explore how DevOps teams can adopt security tactics and leverage AI for better cloud defense, while building diverse teams to strengthen organizational cybersecurity posture.
Как оградить себя от плохих зависимостей
Узнайте эффективные методы и инструменты для контроля и управления зависимостями в продуктах, защищая проекты от потенциально вредных компонентов.
Процесс безопасной разработки и как его внедрить без драк в переговорных
Discover effective strategies for implementing secure development processes in organizations, focusing on methodologies, automation, and conflict-free integration with existing workflows.
Snapshot Fuzzing with WTF Fuzzer - Techniques and Implementation
Master snapshot fuzzing with WTF Fuzzer. Configure Hyper-V, use Windbg and Bdump.js for snapshotting, develop harnesses, and fuzz C programs. Enhance your software security skills through hands-on practice.
The State of Morello and CHERI
Explore the current status and advancements of Morello and CHERI technologies in computer architecture and security.
Lineage: A Data-Flow Analysis for Erlang
Explore a novel data-flow analysis for Erlang, producing over-approximating dataflow graphs for efficient taint checking in large-scale codebases.
The Mess We're Still In - Navigating Complex Systems and Security Risks
Explore the ongoing challenges in software development, focusing on security risks, system complexity, and innovative solutions for building resilient applications.
Why We Need to Adopt Static Analysis in Dependency Tools
Explore the importance of static analysis in dependency tools for enhanced security and efficiency in software development.
Sustainable Open Source - Ensuring Long-Term Viability
Explore sustainable open source practices and their impact on DevSecOps. Learn strategies for maintaining long-term project viability and community engagement.
Proactively Auditing Open Source Dependencies for Security - Here Is a Clean Section of the Beach
Explore proactive auditing of open source dependencies, scaling challenges, and data handling in the Alpha-Omega project. Learn about efforts to enhance software security through systematic scanning and repair.
Taming the Wild World of Open Source
Explore open source benefits, risks, and responsible usage. Learn to evaluate projects, assess licensing and security concerns, and understand project health for informed decision-making in development.
Secure Python Development: Tips, Tricks, and Tools
Explore Python-specific security challenges and solutions, including package management, SAST, and best practices for DevOps environments.
Rust in the Linux Kernel - Implementing Complex Drivers
Explore Rust's integration into the Linux kernel, examining the experience of building complex drivers and the journey of introducing a new language to this critical project.
Defensive Programming Techniques in Go
Explore defensive programming techniques to make Go code more resilient against unforeseen bugs and unexpected inputs. Learn strategies for writing robust and reliable Go programs.
Essential Security Checks for Your Go Project
Implement essential security checks in Go projects using open-source tools like gosec, govulncheck, and sigstore/cosign. Learn to integrate code analysis, vulnerability scanning, and supply chain security.
C/C++ Compiler Options Best Practices - February 15, 2023
Explore best practices for C/C++ compiler options to enhance code security and performance. Learn optimization techniques and defensive programming strategies.
C/C++ Compiler Options Best Practices - March 29, 2023
Discover best practices for C/C++ compiler options to enhance code security and performance. Learn optimization techniques and defensive programming strategies.
Fuzzing at Mach Speed - Uncovering IPC Vulnerabilities on MacOS
Explore advanced fuzzing techniques to uncover IPC vulnerabilities in MacOS, enhancing system security and revealing potential exploits in inter-process communication.