Code Aware Services for Vulnerability Detection - Welcome Back and Remarks
Explore Code Aware Services for complex software security. Learn about build tracing, source code processing, and tools for vulnerability detection in large-scale projects like Android Linux kernel.
Delivering Security Fixes Continuously Into Your Embedded Linux
Learn strategies for continuous security updates in embedded Linux systems, focusing on update models, test automation, and minimizing out-of-tree code. Explore real-world examples using EMLinux and open-source contributions.
Hacking for Developers
Learn ethical hacking techniques, tools, and methodologies to enhance your development skills and improve software security. Gain insights into vulnerability assessment and exploitation.
A Development Environment for DO-178C Level D Certified Linux
Explore Yocto/OpenEmbedded for managing distributed development, automated build/test, and delivering DO-178C level D certified Linux. Learn about traceability, team dynamics, and extensibility in aviation software.
SMT Solvers in IT Security - Deobfuscating Binary Code with Logic
Explore SMT solvers for deobfuscating binary code in IT security. Learn practical applications, theoretical limitations, and solutions for enhancing malware analysis and vulnerability identification.
Find and Fix Software Security Problems - Preventing Security Mistakes
Explore effective strategies for identifying, fixing, and preventing software security issues. Learn how to prioritize and address vulnerabilities to enhance overall system security.
Telepresence Case Studies - From First Experience to Fast Feedback at Scale
Explore how Telepresence improves developer experience, accelerates inner dev loops, and reduces costs in microservice-based applications. Learn implementation through case studies and a demo.
Security as Code - A DevSecOps Approach
Explore DevSecOps and Security as Code with CodeQL. Learn to implement security checks, detect vulnerabilities, and foster collaboration between development and security teams for a robust security culture.
From Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native
Explore cryptojacking evolution in cloud environments, from basic attacks to sophisticated techniques targeting containers and Kubernetes. Learn proactive protection strategies using open-source tools for enhanced security.
NVMe: New Vulnerabilities Made Easy - Exploiting Cloud Storage Protocols
Exploring pre-auth remote vulnerabilities in NVMe implementation, emphasizing the importance of SCA tools in production pipelines and showcasing discoveries in Linux kernel and NVIDIA.
Analyzing Cellular Basebands with FirmWire
Explore FirmWire, an open-source platform for analyzing cellular basebands. Learn about baseband vulnerabilities, emulation techniques, and how to uncover security flaws in LTE and GSM stacks.
Ethical Hacking: Good Intentions and Questionable Outcomes
Explore ethical boundaries in security testing, from fuzzing servers to buying dark web credentials. Discuss grey areas and the need for beneficial practices that maintain moral high ground.
Writing a New Decompiler for JRuby Security Audits
Explore JRuby vulnerabilities and learn about YBurj, a new open-source decompiler for JRuby IR, enabling recovery of compiled source code for enhanced security audits.
Designing Your Own Electronic Attack Device
Learn to design and create custom electronic attack devices, from circuit boards to complete Linux systems, for personalized and efficient security testing and penetration tasks.
Exploiting the Lexmark PostScript Stack
Explore Lexmark PostScript stack exploitation, covering internals, language basics, mitigations, and achieving remote code execution through out-of-bounds read and type confusion vulnerabilities.
The Future of Hacking: OpenAI's GPT-4 Code Interpreter - Cybersecurity Applications
Explore AI's potential in cybersecurity with GPT-4 Code Interpreter. Learn to simplify complex issues, analyze diverse programming languages, and manage cryptocurrency data for enhanced bug hunting and communication.
RAFIA - A Roadmap for Certifying Open Source in Safety-Relevant Systems
Explore RAFIA methodology for certifying open source in safety-critical systems. Learn risk analysis, automated testing, fault injection, mitigation, and compliance steps for embedded Linux-based operating systems.
Finding the Best Block Filesystem for Your Embedded Linux System
Comparison of Linux block filesystems for embedded systems, covering design principles, features, performance metrics, and compression options on ARM boards with SD card storage.
Inclusive Design and Testing - Making Your App More Accessible
Learn to create inclusive apps for users with disabilities through design guidelines and automated testing tools. Gain insights from real user experiences to enhance accessibility and expand your user base.
Security Design Anti-Patterns: Creating Awareness to Limit Security Debt
Explore security design anti-patterns, their impact on SDLC, and strategies to identify and mitigate them early. Learn to create awareness and limit security debt in software development.
Data-Driven AppSec Champions Programs - Benchmarking Your Program with Numbers
Insights from a survey of 26 innovative AppSec champions programs, covering best practices in recruitment, training, communication, and ROI measurement to enhance software security.