The FaaS and the Curious - AWS Lambda Threat Modeling
Explore AWS Lambda threat modeling techniques and security considerations for serverless architectures in this comprehensive analysis of Function-as-a-Service (FaaS) platforms.
Abuse Case Testing in DevOps
Explore abuse case testing in DevOps, covering threat modeling, test development, and integration. Learn to enhance application security through continuous improvement and monitoring.
Threat Modeling - How to Actually Do It and Make It Useful
Learn practical threat modeling techniques for effective cybersecurity. Explore various methodologies, tools, and frameworks to identify and mitigate potential risks in software and systems.
How Online Dating Made Me Better at Threat Modeling
Explore how online dating experiences can enhance threat modeling skills, covering risk assessment, data protection, and security strategies in digital interactions.
How Online Dating Made Me Better at Threat Modeling
Explore how online dating principles apply to threat modeling in cybersecurity, enhancing risk assessment and data protection strategies.
I'll Complete My Threat Model Later Mom - Infosec in Middle School
Explore cybersecurity concepts tailored for middle school students, focusing on age-appropriate threat modeling and digital safety practices.
A Few Things Right - Insights from Live and Simulated Incident Response
Explore insights from live and simulated incident response, focusing on effective strategies, insider threats, communication, and embracing resilience in cybersecurity.
Inside Out Security - Building Castles not Warehouses
Explore inside-out security strategies for robust digital protection. Learn to build "castles" instead of "warehouses" to safeguard assets and mitigate business threats effectively.
Everything I Need to Know About Infosec I Learned from Gambling - Cliff Smith
Explore infosec principles through gambling analogies, covering threat modeling, detection techniques, and fundamental security concepts.
Lessons Learned Implementing SDLC and How To Do It Better
Insights on implementing SDLC effectively, covering management buy-in, security awareness, threat modeling, code review, and testing for better software development practices.
Code Hedgehogs - Changing the S in SDLC to Secure
Explore secure software development through a gamified approach, learning about vulnerabilities, threat modeling, and building secure coding skills with a unique hedgehog-themed perspective.
Assume Worst Intent - Designing for the Abusive Ex
Explore designing apps with consideration for vulnerable users, focusing on potential misuse by stalkers or abusive individuals. Learn threat models and strategies to enhance user safety.
Using a Cloud to Manage a Cloud
QubesOS overview and its application in OrionVM's sysadmin, highlighting benefits, challenges, and potential improvements in managing cloud infrastructure through hypervisor-backed containers.
Why Your Encrypted Database Isn't Secure - Practical Attacks Against Encrypted OSS Databases
Explore practical attacks on encrypted databases, their limitations, and mitigation strategies. Learn about threat modeling and alternative approaches to enhance data security while maintaining performance and usability.
Threat Modeling Node
Learn threat modeling techniques for Node.js applications, enhancing security and identifying potential vulnerabilities in your code and infrastructure.
Red Teaming in Poland - Test Cases
Explore red teaming in Poland through real-world test cases, examining cybersecurity strategies and techniques used to assess and improve organizational defenses.
Secure Coding Best Practices - Threat Hunting
Explore threat modeling and secure coding practices in C++, focusing on identifying attack surfaces, analyzing vulnerabilities, and implementing effective defense strategies for robust software design.
CyberSecurity.bootcamp
Explore cybersecurity essentials for Python applications, covering threat modeling, attack vectors, security testing, and best practices to protect your servers from malicious threats.
Untrusted File Systems
Exploring secure handling of untrusted filesystems in Linux, addressing challenges and potential solutions for USB sticks, VM images, and unprivileged containers.
Kata Containers + Cloud-Hypervisor - Virtualization for Cloud Native
Explore Kata Containers 2.0 and Cloud-Hypervisor for efficient, secure cloud-native virtualization. Learn about resource sharing, on-demand provisioning, and collaboration between host tools, VMM, and guest kernel.
Threat Modelling - Securing Kubernetes Infrastructure & Deployments
Explore secure Kubernetes architecture, threat modeling, and defense-in-depth strategies for regulated environments. Learn real-world examples, compliance standards, and advanced mitigations for multi-tenant security.