Stateless with JWT - JSON Web Token
Explore stateless authentication with JWT, learning its benefits, implementation, and security considerations for modern REST architectures and scalable API design.
Secure Microservices Made Easy with MicroProfile JWT
Learn to secure microservices using MicroProfile JWT, including design overview and live demo on Open Liberty. Explore token-based security propagation for efficient service-to-service communication.
Implementing Microservices Security Patterns & Protocols
Comprehensive guide to securing microservices using industry-standard protocols and Spring Security 5.1, covering OAuth2, OpenID Connect, JWT, and more for robust application security.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for better user account and data protection.
Securing Microservices - A Practical Guide
Practical guide to securing microservices using Game On! as an example. Covers OAuth2, OpenID Connect, social sign-on, and dev/production parity for distributed systems.
Microservices for the Masses with Spring Boot, JHipster, and JWT
Learn to build and secure microservices using Spring Boot, JHipster, and JWT. Explore deployment options, API gateways, and modern tools like Docker and Kubernetes in this code-heavy presentation.
WebRTC Security - Is Web-Based Peer-to-Peer Ready for Primetime?
Explore WebRTC security, architecture, and challenges in web-based peer-to-peer communication. Gain insights into deployment scenarios, potential weaknesses, and open security issues in this emerging technology.
Getting Single Page Application Security Right
Explore SPA security challenges and solutions, covering XSS, CSP, session management, and CSRF in RESTful APIs. Learn practical strategies for building secure web applications using modern frameworks.
Secure Microservices Made Easy with MicroProfile JWT
Learn to secure microservices using MicroProfile JWT. Explore token-based security propagation, understand the design, and see a live demo of microservices communication on Open Liberty.
One Does Not Simply Log In - SSO for Web APIs
Explore OAuth2, OpenID Connect, and JWT for secure authentication in distributed systems. Learn practical solutions using JBoss Keycloak for modern web API security challenges.
Secure Microservices Made Easy with MicroProfile JWT
Explore MicroProfile JWT for secure microservices communication. Learn design principles and see a live demo of token-based authentication between services using Open Liberty.
Securing Your APIs with OAuth 2.0
Learn to secure APIs using OAuth 2.0, covering JWT access tokens, scope design, and microservices architecture. Gain insights on authorization protocols, multi-factor auth, and backend service separation.
The Leaky Web - Automated Discovery of Cross-Site Information Leaks in Browsers and the Web
Explore automated techniques for identifying cross-site information leaks in web browsers, enhancing understanding of web security vulnerabilities and potential mitigation strategies.
WebSpec - Towards Machine-Checked Analysis of Browser Security Mechanisms
Explore machine-checked analysis of browser security mechanisms, focusing on WebSpec's approach to enhancing web security through formal verification and automated reasoning techniques.
Beyond Passwords - How WebAuthn Actually Works
Explore WebAuthn as a secure alternative to passwords, diving into its implementation, hardware token usage, and underlying cryptography for enhanced web authentication.
Content Security Policy to the Rescue
Learn to implement Content Security Policy to mitigate XSS vulnerabilities, prevent clickjacking, and enhance web application security through live demos and real-world examples.
Understanding the OWASP Top 10
Explore critical web application security flaws with examples and best practices. Learn to identify and address OWASP Top 10 vulnerabilities in PHP applications for improved website security.
Web Security And You
Comprehensive overview of web security vulnerabilities, including XSS, CSRF, and SQL injection, with code examples and practical solutions for protecting websites.
Attackers Want Your Data and They're Getting It From Your API
Learn techniques to protect your API from attackers, including traffic analysis, authentication methods, encryption, and advanced security measures. Gain insights into API vulnerabilities and effective countermeasures.
The State of Passwordless Auth on the Web
Explore WebAuthn's potential for passwordless authentication, current user experiences, and strategies for improving security and usability in modern web authentication systems.
Finding Traffic Anomalies Using SSL Certificates
Explore techniques for detecting traffic anomalies using SSL certificates, including metadata analysis, Python scripting, and visualization tools for enhanced network security monitoring.