DevSecCon

Introducción a los CTFs

Hack & Snack – Beer, Pizza & DevSecOps!

Using Threat Modeling to Create a DevSecOps plan

Executando Gestão de Vulnerabilidades com Dados de Threat Intelligence

Git Actions for Android: Simplifying Development

OWASP ML Security Top 10

Ace Your Security: Exploring Card Games in Threat Modelling

AWS Privilege Escalation and Lateral Movements

Platform Engineering in the homelab: self-hosting and automating services you can trust

Cover your apps: 3 pillars of AppSec

Zero Trust Principles in DevSecOps

Motivating the average developer to engage in DevSecOps

Terraform Practices - The Good, the Bad and the Ugly

Docker Security Best Practices

Protecting my Node.js project of dependency confusion attacks

Implementing Policy as Code through Open Policy Agent

An Introduction to PASETO Tokens - Randall Degges

New Async Javascript error handling - Jorge Marin

A Crash Course in Audit Logs

Using Gitops and github Events/ CDevents in DevSecOps release orchestration pipeline

Tales from the real world: Building cloud security programs that can actually shift left

COM Hijacking VOODOO with Nick Vourdas

Infrastructure-as-code Security: Why, What, and How

DevSecOps Connect

Policy as [versioned] Code: Embrace Continuous Policy Management

Terraform Best Practices with Keerthivasan Kannan

The State of Kubernetes Security

Know thy neighbours: dependency management done right - Brian Vermeer

How to Enforce CIS Benchmark policies using Azure Blueprints

THREAT MODELING IN 2021 with Adam Shostack

OpenRewrite: Making your source code fix itself

Supply Chain Security Feautures for Dart and Flutter projects on Github with Antony Wugoma

Why Kotlin is my favourite example of Functional Programming? - Jayashree S Kumar

Save the day with Proper Input Validation in Java Spring Boot

OWASP LLM Top 10 by R Nagarjun

GitHub-Azure Authentication and SLSA in DevOps with Marcel Lupo and Joshua Lock

Application Threat Modeling explained in a playful way with a card game.

Human vs AI: How to ship secure code with Joseph Katsioloudes

Zero trust authorization with Open Policy Agent with Ádám Sándor

Building Secure React Applications

Vulnerability scanning for container images

Why most “How tos” on scaling DevSecOps fail and how do we fix itwith Sandesh Anand

The Unicorn Project And The Five Ideals - Gene Kim

Ep.

DevSecCon24 - Stream 1

Strengthening the Software Supply Chain and Open Source Projects

Modern Java Clients with JavaFX: The Definitive Guide - Stephen Chin

Real World Applications with Angular & Firebase - Idan Cohen