Fixing Broken Enterprise Threat Models with OWASP Efforts - Commissioning AppSec Professionals for Real Change
Explore how OWASP projects can revolutionize enterprise threat modeling, addressing compliance issues, undefined attack surfaces, and risk distortions to create measurable security impact.
Pushing Left Like A Boss - Application Security Foundations
Discover application security foundations and learn to 'push left' in the software development lifecycle. Explore strategies from vulnerability scanning to red team exercises for a proactive approach to security.
Incremental Threat Modeling
Learn incremental threat modeling techniques for complex projects, focusing on efficient security analysis without extensive initial time investment.
Threat Modeling With Architectural Risk Patterns
Explore efficient threat modeling using architectural risk patterns, emphasizing software-centric methods to enhance speed and consistency in identifying security risks across enterprise environments.
Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
What's Left for Private Messaging
Exploración de técnicas avanzadas de mensajería privada, desde cifrado de extremo a extremo hasta sistemas descentralizados, abordando amenazas y equilibrando privacidad y usabilidad en la comunicación en línea.
What's Left for Private Messaging
Überblick über sichere Messaging-Technologien: Verschlüsselung, Metadatenschutz und innovative Ansätze zur Verbesserung der Privatsphäre in der Online-Kommunikation.
Securing DevOps - Common Misconceptions - DefCamp - 2019
Explore common misconceptions in securing DevOps, covering culture shifts, attack scenarios, and key strategies for building resilient systems in this DefCamp 2019 presentation.
Building Application Security With 0 Money Down - DefCamp - 2018
Discover cost-effective strategies for building robust application security. Learn about threat modeling, inception checklists, and maturity goals to enhance your cybersecurity practices without breaking the bank.
A Network of Sorrows - Small Adversaries and Small Allies
Exploring the impact of everyday security threats on ordinary people and advocating for user empowerment to build a safer internet through knowledge sharing and community support.
Practical Attack Simulations in Critical National Infrastructure
Explore practical attack simulations in Critical National Infrastructure, focusing on risk reduction, threat modeling, and effective testing strategies for industrial control systems.
Threat Modelling and Beyond for Cisco ACI
Explore advanced threat modeling techniques for Cisco ACI, covering physical layout, architecture, STRIDE analysis, and potential vulnerabilities in network security.
API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale
Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.
Using the Threat Modeling Manifesto to Build an Enterprise Threat Modeling Program
Learn to build an enterprise threat modeling program using the Threat Modeling Manifesto. Discover key principles, benefits, and practical tips for implementing effective security practices across your organization.
Does Your Threat Model Consider Country and Culture? A Case Study of Brazilian Internet Banking Security to Show That It Should
Explores unique cybersecurity challenges in Brazilian internet banking, highlighting how regional factors shape threats and the need for localized threat models in global security assessments.
Threat Modeling Cloud Apps - What You Don't Know Will Hurt You
Explore threat modeling for cloud applications, focusing on AWS services, security controls, and potential risks. Learn to identify assets, adapt to cloud architectures, and address new security challenges.
Simplifying Threat Modeling
Simplified approach to threat modeling: identify attack surfaces, visualize users as threats, illuminate assets and trust boundaries, postulate attacks, evaluate impact, and mitigate risks.
Improve Your SDLC with CAPEC and CWE
Enhance software development lifecycle using CAPEC and CWE. Learn threat modeling, design considerations, and security testing techniques to improve application security.
Threat Modelling Stories from the Trenches
Explore real-world design flaws and secure design principles through interactive case studies in threat modeling across various domains, enhancing your software analysis skills.
Achieve AI-powered API Privacy Using Open Source
Explore AI-powered API privacy using open-source tools. Learn about Privacy-by-Design, threat modeling, and leveraging deep neural networks to protect customer data in software development.
The A's, B's, and Four C's of Testing Cloud-Native Applications
Explore cloud-native app testing with the A's, B's, and Four C's framework, covering threat modeling, API testing, and security management for modern software development.