CANSentry- Securing CAN-Based CPS Against Denial and Spoofing Attacks
Explore innovative techniques for securing CAN-based cyber-physical systems against denial and spoofing attacks, focusing on the CANSentry approach and its implementation.
Threat Models for Exercising SIEM and Incident Response
Explore effective threat modeling techniques to enhance SIEM and incident response capabilities, improving overall cybersecurity preparedness and resilience.
Aligning Threats and Allies Through Stories - Security Exercises and Threat Modeling
Explore threat management and security exercises through storytelling techniques, enhancing threat modeling and aligning security strategies with organizational goals.
Dungeons and Dragons, Siege Warfare, and Fantasy Defense in Depth
Explore fantasy-inspired cybersecurity concepts through Dungeons & Dragons and siege warfare analogies, offering unique insights into defense-in-depth strategies for IT professionals.
Defense Evasion Modeling - BSidesLV 2013
Explore defense evasion modeling techniques to enhance cybersecurity strategies and stay ahead of evolving threats in this insightful presentation from BSidesLV 2013.
Baking in Security - Lecture 1.2.5
Explore essential security practices for software development, emphasizing the importance of integrating security measures from the start of the development process.
Threat Model Express - Rapid Security Assessment Techniques
Learn efficient threat modeling techniques to identify and mitigate security risks in software development, enhancing your ability to create more secure applications.
How to Create a One-Man Security Operations Center (SOC)
Learn to establish and operate a one-person Security Operations Center (SOC) with practical tips on workflow creation, tool selection, automation, and incident response strategies.
Developing a Converged IT/OT Threat Model Using MITRE ATT&CK
Develop a converged IT/OT threat model using MITRE ATT&CK framework to map and prioritize defensive capabilities for unified cyber defense strategy across industrial control systems.
Operationalizing Threat Intelligence in Industrial Control Systems
Operationalizing threat intelligence in ICS: Learn to consume, digest, and apply intelligence to enhance cybersecurity decisions and improve operations in industrial control systems.
Cipherspaces and Darknets - An Overview of Attack Strategies
Explore attack strategies on Tor and darknets, covering threat models, encryption layers, DNS leaks, metadata risks, and mitigation techniques for enhanced anonymity.
Securing the Connected Car with RVI
Explore automotive network security, threat models for connected cars, and how GENIVI's Remote Vehicle Interaction project mitigates risks in this informative presentation by a Jaguar Land Rover expert.
Threat Modeling Panel - APPSEC Cali 2018
Expert panel discusses threat modeling techniques, challenges, and best practices in application security, featuring insights from industry leaders at major tech companies.
The Best Flaw Didn't Make It Into Production - Addressing Security Gaps in Development
Explore innovative approaches to address application security gaps, focusing on timely collaboration between security practitioners and development teams to influence secure coding practices.
OWASP Top 10 - Application Security Risks
Explore the latest OWASP Top 10 web application security risks with expert Andrew van der Stock. Learn about critical vulnerabilities and effective mitigation strategies for safer software development.
Threat Modeling Stories from the Trenches - Security Design Flaws and Solutions
Explore real-world threat modeling scenarios, design flaws, and security controls. Learn to identify vulnerabilities, understand attack vectors, and implement effective countermeasures in various systems.
AppSec Challenges - Overcoming Framework Limitations and Building Robust Security
Exploring challenges in application security, analyzing framework limitations, and discussing robust approaches to improve security at scale while making it more manageable.
Fast Forwarding Mobile Security with the Mobile Security Testing Guide
Explore mobile security advancements and best practices using the Mobile Security Testing Guide (MSTG) in this comprehensive OWASP presentation.
Threat Model-as-Code: Integrating Security into the Software Development Lifecycle
Integrating threat modeling into software development lifecycle using "Automaton" framework, enabling actionable outputs and automated security testing for improved product security.
Teaching Sustainable Security in DevOps and Agile Environments - AppSecUSA 2018
Strategies for sustainable security in DevOps teams: assessment, training, coaching, automation, and risk management. Avoid common pitfalls and empower teams for long-term security success.
Embedding GDPR into the Software Development Lifecycle
Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, threat modeling, and breach notification processes.