WAFs FTW! A Modern DevOps Approach to Security Testing Your WAF
Explore modern DevOps approach to security testing Web Application Firewalls (WAFs) using Framework for Testing WAFs (FTW). Learn objective WAF evaluation, rapid prototyping, and continuous testing strategies.
The DevSecOps Playbook - From A Practitioner's Perspective
Practical guide to implementing DevSecOps, covering mindset shifts, automation, communication strategies, skill requirements, and collaborative tools for safer software development.
The Ways Hackers Are Taking To Win The Mobile Malware Battle
Explore cutting-edge mobile malware techniques, security paradigms, and detection methods. Live demo showcases creation of undetectable malware, highlighting challenges in mobile security.
Practical Static Analysis for Continuous Application Security
Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.
Why Hackers Are Winning The Mobile Malware Battle - Bypassing
Explore mobile malware challenges, hacker tactics, and bypassing techniques in this insightful talk on the evolving landscape of mobile security threats and defenses.
Bug Hunting on the Dark Side
Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.
Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
Application Security Playbook for Business
Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.
Flipping the Script on Application Security
Learn about GitHub's developer-first approach to application security, addressing common DevSecOps challenges and exploring innovative solutions like credential scanning and static analysis.
Testing Security the Right Way
Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.
Automated Machine Learning and Explainability
Explore Oracle AutoML's innovative approach to simplifying machine learning, integrating explainability techniques for enhanced user understanding and trust in complex ML pipelines and models.
Store and Analyze JSON Data Using the Oracle API for MongoDB and SQL/JSON
Learn to leverage MongoDB API with Oracle Autonomous Database for JSON data storage and analysis. Explore microservice development, SQL querying, and data visualization using Oracle's powerful database tools.
Testmark: A Markdown Convention for Test Fixtures and Data - Eric Myhre
Discover Testmark: a Markdown convention for test fixtures and data. Learn syntax, libraries, and real-world applications for keeping documentation and examples up-to-date across multiple programming languages.
Investigating Windows Graphics Vulnerabilities - A Reverse Engineering & Fuzzing Story - DefCamp - 2019
Explore Windows graphics vulnerabilities through reverse engineering and fuzzing techniques, focusing on GDI components, patch analysis, EMF format, and effective fuzzing strategies.
Hacking the Hacker - The Story - DefCamp - 2019
Explore the journey of hacking a Honda vehicle, from initial assumptions to uncovering vulnerabilities. Learn about tools, techniques, and insights gained during this ethical hacking process.
Building Application Security With 0 Money Down - DefCamp - 2018
Discover cost-effective strategies for building robust application security. Learn about threat modeling, inception checklists, and maturity goals to enhance your cybersecurity practices without breaking the bank.
Securing Without Slowing - DefCamp - 2017
Explore DevOps-inspired strategies for enhancing security without compromising speed. Learn about rugged DevOps, pipeline protection, and automation to create robust, efficient systems.
Cyber Grand Shellphish - Shellphish and the DARPA Cyber Grand Challenge
Explore autonomous hacking with Mechanical Phish, a system for automatic bug detection, exploit creation, and binary patching. Learn about its design, challenges, and implementation in the DARPA Cyber Grand Challenge.
Implementing an USB Host Driver Fuzzer
Explore USB host driver fuzzing techniques, covering USB basics, security implications, and practical implementation steps for effective vulnerability discovery.
What Happens in Windows 7 Stays in Windows 7
Explore Windows 7 vulnerabilities, bug hunting techniques, and the cybersecurity market. Learn automated approaches for identifying and documenting system weaknesses.
Adventures in SCADA
Explore SCADA systems' vulnerabilities and security challenges in industrial control environments, focusing on power companies, trust issues, and mitigation strategies.