SecureMe Droid - Android Security Application for Vulnerability Notifications
SecureMe - Droid notifies users of known vulnerabilities in installed Android apps. It uses a client-server model, NVD CVE database, and respects user privacy while providing easy configuration and scheduled scanning options.
Legacy Java Vulnerabilities - Ignore at Your Own Risk
Explore legacy Java vulnerabilities, their persistence, and mitigation strategies. Learn about security risks, update challenges, and alternative approaches for protecting enterprise applications.
Building a Security Test Automation Framework
Learn best practices for building a security test automation framework using Docker, Kubernetes, and Defect Dojo. Discover how to manage vulnerabilities, prevent key sprawl, and implement security tooling in CI/CD pipelines.
Leveraging the ASVS in the Secure Software Development Lifecycle
Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.
OWASP ESAPI - A Retrospective: The Good, the Bad, and the Ugly
Retrospective on OWASP ESAPI security library, exploring successes, failures, and challenges in developing and maintaining comprehensive web application defenses.
Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps
Discover how OWASP Dependency-Check enabled large-scale Software Composition Analysis on hundreds of vendor-managed apps, addressing software supply chain risks and patch debt in just two months.
Managing Application Level SBOMs with Ortelius
Explore application-level Software Bill of Materials (SBOMs) management using Ortelius, enhancing software supply chain security and transparency in modern development practices.
Purl and Vers: Universal Package URL and Version Ranges Identifiers for Dependencies and Vulnerabilities
Explore universal identifiers for software dependencies and vulnerabilities, enhancing package management and security across diverse ecosystems.
Anatomy of a Cloud Security Breach - 7 Deadly Sins
Explore 7 real cloud security breaches, their attack patterns, and defense strategies. Learn key differences between cloud and on-premise threats, and gain actionable insights to protect your cloud infrastructure.
Cloud Native Security Landscape - Myths, Dragons, and Real Talk
Explore cloud-native security across the software lifecycle, from open-source creation to runtime threat detection. Learn about key projects, developer-security team collaboration, and separating real risks from myths.
Improving the Security of a Large Open Source Project One Step at a Time
Explore Node.js security initiatives, from new features to vulnerability management. Learn to apply these insights to your development process and contribute to the Node.js community's security efforts.
Enhancing FIDO2 Security for Safety-Critical Applications: Best Practices and Considerations
Explore FIDO2 authentication in safety-critical systems, covering testing, hardening, and best practices for dependability, security, and certification integration to enhance open-source project confidence.
Securing Multi-Cluster Cassandra and GenAI Deployments
Explore top cloud threats, risk detection strategies, and best practices for securing Cassandra and GenAI deployments. Includes practical demonstrations on live clusters and AI applications.
Resolving the C/C++ Dependency Management Blind Spot
Explore C/C++ dependency management challenges, inclusion methods, and solutions for effective open source risk management in performance-critical applications.
SW360 SBOM - Managing Vulnerability Information, SPDX Documents and Dependency Networks
Explore SW360's features for managing software components, including vulnerability tracking, SPDX document handling, and dependency network visualization for enhanced license compliance and security.
Managing Open Source at Scale in an Era of Heightened Security Concerns - Panel Discussion
Industry leaders discuss open source security challenges, policy implications, and strategies for managing and securing open source software at scale in enterprise environments.
Responsible Use of Node.js and Open Source Software - Best Practices at Enterprise Scale
Explore enterprise-level best practices for managing Node.js and open-source software risks, focusing on Capital One's strategies for security, governance, and developer efficiency.
Utilizing Package-URLs for SBOM Management and Vulnerability Tracking
Explore SBOM management, Software Composition Analysis, and vulnerability tracking using Package-URLs and VulnerableCode for effective open-source component handling and policy compliance.
Improving the Security of a Large Open Source Project One Step at a Time
Explore Node.js security initiatives, learn from real-world vulnerabilities, and discover how to contribute to the project's safety. Gain insights to enhance your own development process and ecosystem security.
SPDX 3.0 Overview - Introduction to Software Package Data Exchange
Explore the latest updates and enhancements in SPDX 3.0, the open standard for software bill of materials, and learn how it improves software supply chain transparency and security.
The Anatomy of Java Vulnerabilities
Explore Java vulnerabilities, their management, and defense strategies. Learn about attack vectors, reporting processes, and effective methods to enhance code security against cyber threats.