Rust-VMM: A Security Journey
Explore rust-vmm's security journey, covering components, audits, development practices, and fuzzing techniques for virtualization and Virtio components.
Supply Chain Armoring: Tools and Techniques for Open Source Projects
Explore tools and techniques for securing open source supply chains, addressing urgent issues and US Executive Order requirements for critical software protection.
Vulntology - A Methodology to Characterize Vulnerabilities with Granular and Intuitive Structure
Explore a methodology for characterizing vulnerabilities with granular, intuitive structure. Learn about vulnerability objects, scenarios, barriers, actions, and impacts in cybersecurity.
Securing Open Source Through Threat Modeling
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
Secure Bootloaders and Secure Software Update Support in CIP - Civil Infrastructure Platform
Explore secure bootloaders and software updates in CIP, focusing on implementation, IEC-62443 compliance, and the collaborative efforts of CIP workgroups to enhance industrial software security.
Securing the Software Supply Chain: From Threats to Best Practices
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.
Introduction to Threat Modeling in the Cloud
Learn essential techniques for identifying and mitigating security risks in cloud environments through threat modeling, with practical insights from the Argo Project Threat Model.
Building a Software Security Program
Discover how to build a comprehensive Software Security Program addressing people, process, and technology challenges in software development, reducing risk and improving efficiency.
Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust
Explore Zero Trust principles and threat modeling for cloud-native systems. Learn to implement secure architectures using Istio, Kubernetes, SPIRE, and OPA for robust, distributed workload protection.
Data Security and Storage Hardening in Rook and Ceph
Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.
Untrusted Execution - Attacking the Cloud Native Supply Chain
Explore cloud native supply chain vulnerabilities, threat modeling, and security controls. Learn about trusted execution environments and end-to-end security solutions for protecting complex systems.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
Security That Enables - Breaking Down Security Silos in the DevOps Ecosystem
Explore strategies to integrate security seamlessly into DevOps, addressing challenges in CI/CD workflows and learning from real-world breaches to enable confident, secure deployments.
Attacking and Defending Kubernetes TEE Enclaves in Critical Infrastructure
Explore Kubernetes TEE enclaves for critical infrastructure security. Learn attack and defense strategies, threat modeling, and compliance benefits for various regulations.
Building Secure Hybrid Mobile Applications - A Security Professional's Guide
Learn to assess and secure hybrid mobile apps by understanding threat models and vetting external libraries, enhancing your ability to build robust applications.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Envoy Gateway End User Threat Model Report: Raising Awareness of Gateway API Security
Explore Envoy Gateway's security through a threat-driven analysis, providing insights for confident deployment as an edge proxy in Kubernetes clusters.
Application Threat Modeling Implementation Tips and Tricks
Learn essential tips and techniques for implementing application threat modeling, including DFD design for microservices and client-side frameworks, and effective threat identification and risk analysis strategies.
Automating Architectural Risk Analysis with Open Threat Model Format
Explore automating architectural risk analysis using Open Threat Model format. Learn to create OTM files, integrate threat modeling into DevSecOps, and address challenges in software development security.