Securing Embedded Linux Systems with TPM 2.0
Explore TPM 2.0 for securing embedded Linux systems. Learn threat modeling, Intel's TPM2 software stack, and implementation using Open Embedded layer for enhanced system integrity and security.
Assessing the Embedded Devices On Your Network
Explore embedded device security challenges, threat modeling, and assessment techniques through a VoIP phone case study. Learn hardware tricks, debugging methods, and potential mitigations for vulnerabilities.
Building Your Cybersecurity Architecture Planning Toolbox
Learn to build and effectively use a cybersecurity architecture toolbox, covering analytical, informational, and design tools for successful security planning and implementation.
My Threat Model is Your Threat Model
Explore evolving threat landscapes, from nation-state conflicts to sophisticated attacks on individuals and devices. Learn about below-OS mitigations to protect BIOS, firmware, and data.
Threat Informed Defense
Explore Threat Informed Defense to prioritize and focus cybersecurity efforts. Learn to create threat models, leverage behavior-based detections, and efficiently protect evolving organizations against complex threats.
Bhadra Framework - Threat Modeling for Mobile Communication Systems
Explore the Bhadra framework for threat modeling in mobile communication systems, addressing complex security challenges and providing a structured approach to analyze adversarial behaviors in telecom networks.
Introduction to Threat Modeling
Learn threat modeling basics, STRIDE model, and OWASP Threat Dragon in this interactive session. Gain practical skills to identify and mitigate security risks in software development.
Perfect Storm - Taking the Helm of Kubernetes
Explore Kubernetes security, from container basics to advanced attack techniques and cloud security considerations, with practical insights and defensive strategies.
How I Learned Docker Security the Hard Way - So You Don’t Have To
Practical insights on securing Docker containers, from architecture to incident response. Learn threat modeling, attacker techniques, and best practices for DevOps security.
Demystifying 5G Security through Threat Modeling
Comprehensive analysis of 5G security risks using threat modeling. Explores new technology components, services, and mitigating controls in the 5G ecosystem, with a focus on the World Bank Group's approach.
The Impact of Software Security Practice Adoption Quantified
Quantitative analysis of software security practices' impact on risk outcomes, based on data from 200 Comcast teams. Insights on effective strategies for enhancing cybersecurity in diverse tech environments.
Serverless Attack Vectors
Explore serverless attack vectors, security challenges, and defense strategies in cloud computing. Learn about potential vulnerabilities and best practices for protecting serverless architectures.
Does Anyone Remember Enterprise Security Architecture
Explore enterprise security architecture with Rockie Brockway, covering compliance, complexity, threat modeling, defense in depth, and metrics for effective organizational protection.
Planning and Executing a Red Team Engagement
Planning and executing a red team engagement: strategies, tools, and techniques for simulating real-world cyber attacks to assess and improve an organization's security posture and incident response capabilities.
Penetration Testing Trends
Explore current penetration testing trends, challenges in mobile and internal security, and the importance of red teaming with insights from industry expert John Strand.
Looking for Malicious Hardware Implants with Minimal Equipment
Explore hardware security threats, detection methods, and threat modeling with minimal equipment. Learn to identify unexpected features and understand the challenges of hardware implants and interdiction.
Command and KubeCTL - Real-World Kubernetes Security for Pentesters
Explore Kubernetes security challenges, attack techniques, and practical advice for pentesters and security practitioners in containerized environments.
Resistance Isn't Futile - A Practical Approach to Prioritizing Defenses with Threat Modeling
Practical approach to threat modeling for prioritizing defenses. Learn to identify relevant adversaries, match them to your organization, and take action to improve security posture.
fTPM - A Software-Only Implementation of a TPM Chip
Explore software-based TPM implementation using ARM TrustZone, overcoming hardware limitations to provide robust security features for trusted computing in mobile devices.
The Bad Guys Win - Analysis of Magecart Vulnerabilities
Comprehensive analysis of Magecart vulnerabilities, exploring attack methods, defense mechanisms, and enterprise challenges in securing third-party scripts and preventing digital supply-chain attacks.
Can You Roll Your Own SIEM
Explore building a custom cloud-native SIEM solution, discussing considerations, requirements, and benefits compared to vendor options. Learn about cost savings and improved capabilities.