Building a Secure Supply Chain
Explore secure image supply chains, vulnerability scanning, and automated auditing for robust container security and peace of mind.
State of Open Source Networking and Edge - Day 1
Overview of open source networking and edge computing trends, highlighting security, project growth, and industry collaborations in the evolving digital landscape.
State of Open Source Networking and Edge - Day 2
Explore open source networking and edge computing trends, security challenges, and future developments in this insightful talk by Arpit Joshipura from The Linux Foundation.
My Threat Model is Your Threat Model
Explore evolving threat landscapes, from nation-state conflicts to sophisticated attacks on individuals and devices. Learn about below-OS mitigations to protect BIOS, firmware, and data.
Pen-Testing the Supply Chain
Explore software supply chain risks through enhanced security testing and adversary simulation. Learn to identify vulnerabilities, assess vendor risks, and implement effective security measures.
Silicon - Security's New Layer
Explore hardware security challenges, from supply chain vulnerabilities to chip-level attacks. Learn about emerging threats and best practices for securing technology stacks from silicon to software.
Protect Yourself Against Supply Chain Attacks
Explore supply chain attack vectors, from CI/CD pipeline vulnerabilities to package squatting, and learn protective measures for securing your development environment.
A Broken Chain - Discovering OPC UA Attack Surface and Exploiting the Supply Chain
Explore OPC-UA protocol vulnerabilities and potential cyberattack vectors in industrial communication systems. Learn about attack surfaces, exploitation techniques, and security implications for Industry 4.0 environments.
Supply Chain Infections and the Future of Contactless Deliveries
Explore supply chain risks, their consequences, and industry mitigation strategies in light of recent challenges. Gain insights into software integrity and future security measures.
XSS Mitigation - The State of the Art
Comprehensive overview of XSS attacks and modern defense strategies, covering browser-based, server-side, and framework-specific mitigations for web developers and security professionals.
Building a Vulnerability Disclosure Program That Works for Election Vendors and Hackers
Explore the creation of effective vulnerability disclosure programs for election vendors, balancing security needs with researcher collaboration to enhance voting system integrity.
Picking Lockfiles - Attacking & Defending Your Supply Chain
Explore supply chain vulnerabilities in open source software, focusing on lockfile attacks. Learn offensive and defensive techniques to enhance project security.
The Cost of Complexity - Different Vulnerabilities While Implementing the Same RFC
Exploring security vulnerabilities in DNS implementations due to complexity and ambiguity in RFC 1035, focusing on message compression and its impact on TCP/IP stacks.
SMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets
Uncover the operations of SMS PVA services and mobile botnets, exploring device infection methods, threat actor misuse, and the implications for supply chain security in mobile ecosystems.
Hunting Supply Chain Threats Using Anomaly Detection
Explore a case study on detecting supply chain threats through anomaly detection in Cloud API logs, offering insights into advanced cybersecurity techniques.
A Radiography of a SBOM Vulnerability Scanner
Explore Software Bill of Materials (SBOM) for enhanced cybersecurity. Learn about SBOM tools, formats, and integration in DevSecOps pipelines. Practical examples using Syft, Grype, and bomber for vulnerability scanning.
Instrument to Remove - Using Java Agents for Fun and Profit
Explore Java agents for profiling and dead code removal. Learn techniques to create custom agents, instrument code, and identify unused classes and dependencies to enhance application security.
FirmWar - An Imminent Threat to the Foundation of Computing
Explore the overlooked risks of enterprise device firmware in IT supply chains, uncovering vulnerabilities and discussing their impact on computing security and industry practices.
Protect Against Unknown Security Vulnerabilities
Explore NeuVector's open-source solution for securing cloud-native applications throughout the software development lifecycle, focusing on protection against unknown vulnerabilities in Kubernetes environments.
Hardware Security Following CHIPS Act Enactment - New Era for Supply Chain
Explore the impact of the CHIPS Act on hardware security and supply chain innovation with experts from government and industry, discussing policy developments and global implications.
Pwning the CI - GitHub Actions Edition
Explore GitHub Actions security vulnerabilities and their impact on CI/CD pipelines. Learn about common exploits and best practices to protect your supply chain from potential attacks.