Security Design Anti-Patterns: Creating Awareness to Limit Security Debt
Explore security design anti-patterns, their impact on SDLC, and strategies to identify and mitigate them early. Learn to create awareness and limit security debt in software development.
Cybersecurity Trends and Challenges - 2022 Global AppSec Keynote
Explore cutting-edge application security insights and trends with Simon Bennetts' keynote address at the 2022 Global AppSec conference in San Francisco.
Introducing Threat Modeling to Established Teams
Learn effective strategies for implementing threat modeling in established teams, enhancing security practices and fostering a proactive approach to identifying potential vulnerabilities.
Empowering the Guardians of Your Code Kingdom
Explore strategies for empowering developers to become guardians of code security, enhancing application protection and fostering a security-first mindset in software development.
Threat Modeling Without the Buzzwords - An Overview of What It Means for Your Organization
Comprehensive overview of threat modeling in cybersecurity, covering its purpose, benefits, and best practices for enhancing organizational security posture without industry jargon.
Proactive Defense - Advanced Threat Modeling for Robust Cybersecurity
Advanced threat modeling techniques for proactive cybersecurity defense, leveraging machine learning and threat intelligence to anticipate and mitigate emerging threats before exploitation.
Elite Security Champions: Building a Strong Security Culture in DevSecOps
Explore building an elite Security Champion program for DevSecOps success. Learn essential skills, program elements, and strategies to create a strong security culture and maximize ROI.
Overcoming Resistance to Threat Modeling in Organizations
Strategies for overcoming resistance to threat modeling in organizations, addressing common obstacles, and turning initial rejections into opportunities for gradual adoption and growth.
Please Don't Discard - Security Data: Leveraging Structured Security Review Data
Discover how to leverage security review and threat modeling data for future challenges. Learn from Snowflake's approach to structuring and persisting valuable security information.
Insane in the Supply Chain - Threat Modeling for Attacks on AI Systems
Explore AI supply chain risks and threat modeling strategies to protect against attacks that could impact company reputation and executive liability.
Threat Modeling for AI Apps with Attacks as Code
Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.
Designing Security and Privacy - A Developer's Guide to Threat Modeling with OWASP SAMM
Learn threat modeling techniques using OWASP SAMM to enhance security and privacy in software development, empowering developers to identify and mitigate potential risks effectively.
Transitive Vulnerabilities Exploit in Real-life
Explore real-world transitive vulnerability exploits with security experts, gaining insights into complex attack chains and practical defense strategies for robust system protection.
Paved Roads to Express RBAC in Threat Models
Learn effective techniques for incorporating Role-Based Access Control (RBAC) into threat modeling, enhancing security design and risk assessment for software systems.
Using Threat Modeling to Create a DevSecOps Plan
Discover how to leverage threat modeling for effective DevSecOps planning. Learn to identify threats, select appropriate security tools, and seamlessly integrate them into your development pipeline.
Curtail Coercive Control Using Open Source Applications and Services
Explore strategies to combat technology-enabled coercive control using open-source solutions. Learn design principles, privacy considerations, and challenges in addressing digital abuse.
Everything-as-Code: Pushing the Boundaries of SAST
Explore the evolution of SAST in the "everything as code" era, examining challenges in analyzing infrastructure, contracts, and circuits, with focus on Bicep and Solidity languages.
Zero Trust Threat Modeling - Implications for Application Security
Explore zero trust's impact on application security and threat modeling. Learn new design principles, threats, and approaches for effective zero trust threat modeling in modern environments.
Purple is the New Black - Modern Approaches to Application Security
Explore modern application security strategies for new technologies, emphasizing the importance of product security in today's cyber landscape and the need for innovative, affordable approaches.
Mapping CI/CD Attack Surfaces - Strategies and Insights
Explore CI/CD attack surface mapping with insights on problem areas, blind spots, and actionable strategies. Learn about future advancements in reducing vulnerabilities in CI/CD ecosystems.
Why Put Security in DevOps - and How
Explore integrating security into DevOps practices, understanding its importance and implementation strategies for enhanced software development.