Канал: Open Security Summit

AI Agents for Cyber Threat Intelligence

AI Agents for Cyber Threat Intelligence

Micro, Mid-Range, Macro - How Gen AI Risk Breaks Us

Micro, Mid-Range, Macro - How Gen AI Risk Breaks Us

Zero Trust in Distributed Media Workflows for Hollywood

Zero Trust in Distributed Media Workflows for Hollywood

Scaling CyberSecurity teams using GenAIs and FMs

Scaling CyberSecurity teams using GenAIs and FMs

The Rise of AI Security Engineers

The Rise of AI Security Engineers

Attack Surface Mapping

Attack Surface Mapping

Threat Modeling V

Threat Modeling V

Threat Hunting and Detection Strategies: Proactive Defense in Action (panel)

Threat Hunting and Detection Strategies: Proactive Defense in Action (panel)

Mental Health in Cyber Security

Mental Health in Cyber Security

Supply Chain Security: Strengthening Resilience Against Third-Party Risks(panel)

Supply Chain Security: Strengthening Resilience Against Third-Party Risks(panel)

Addressing the cyber unemployment crisis; a positive outlook

Addressing the cyber unemployment crisis; a positive outlook

The Importance of Normalizing Mental Health and Cybersecurity Conversations

The Importance of Normalizing Mental Health and Cybersecurity Conversations

The Importance of Sharing Open Source Projects

The Importance of Sharing Open Source Projects

Is an LLM Mathematically Deterministic

Is an LLM Mathematically Deterministic

Azure OpenAI Service Demo 4

Azure OpenAI Service Demo 4

The Future of Chat GPT

The Future of Chat GPT

What is the Open Security Summit and How to Be Part of It?

What is the Open Security Summit and How to Be Part of It?

Symantec Threat Modeling

Symantec Threat Modeling

LangChain and the Future of OpenAI

LangChain and the Future of OpenAI

What's an AI System and How it is Different to an AI Model?

What's an AI System and How it is Different to an AI Model?

eBPF in the Linux Kernel

eBPF in the Linux Kernel

Machine Learning: Confusion and Hallucinations

Machine Learning: Confusion and Hallucinations

Can Bing Outpace Google?

Can Bing Outpace Google?

Securing CI/CD Runners Through eBPF Agent

Securing CI/CD Runners Through eBPF Agent

Who Goes There? Actively Detecting Intruders With Cyber Deception Tools

Who Goes There? Actively Detecting Intruders With Cyber Deception Tools

Technics to limit hallucinations when using a LLM solution like ChatGPT

Technics to limit hallucinations when using a LLM solution like ChatGPT

Threat Modeling Kata IV

Threat Modeling Kata IV

A call for Metrics

A call for Metrics

Turning the Tide : How to convince Senior Management and Ownership to invest in Cybersecurity

Turning the Tide : How to convince Senior Management and Ownership to invest in Cybersecurity

OWASP WrongSecrets : Define The Future Challenges Together

OWASP WrongSecrets : Define The Future Challenges Together

Alert Readiness Framework

Alert Readiness Framework

Stop Committing Your Secrets - Git Hooks To The Rescue

Stop Committing Your Secrets - Git Hooks To The Rescue

Battling the coming wave, Understanding Cybersecurity in 2024

Battling the coming wave, Understanding Cybersecurity in 2024

API Security by Design

API Security by Design

OWASP WrongSecrets: A Journey into Secret Management Failures

OWASP WrongSecrets: A Journey into Secret Management Failures

How to perform threat assessments, the right way!

How to perform threat assessments, the right way!

AI-Driven Threat Modelling with STRIDE GPT

AI-Driven Threat Modelling with STRIDE GPT

Utilising Security Champions Product Teams

Utilising Security Champions Product Teams

The Balance Between Machine and Human Effort

The Balance Between Machine and Human Effort

Bringing More Neurodiversity into the IT Industry

Bringing More Neurodiversity into the IT Industry

Vulnerability at Scale

Vulnerability at Scale

The Top 10 Vulnerabilities that are Being Exploited at Scale

The Top 10 Vulnerabilities that are Being Exploited at Scale

Understanding Vulnerability Patterns and Trends

Understanding Vulnerability Patterns and Trends

The 10% of Vulnerabilities that Matter

The 10% of Vulnerabilities that Matter

The Broken World of Cybersecurity

The Broken World of Cybersecurity

Generating Realistic Scenarios for Incident Response Testing

Generating Realistic Scenarios for Incident Response Testing

Risk Analysis and The Search for Value

Risk Analysis and The Search for Value

The Importance of Maps and Patterns in Understanding Landscape

The Importance of Maps and Patterns in Understanding Landscape

The Power of Multimodal Version

The Power of Multimodal Version

The Power of Neurodiversity

The Power of Neurodiversity

The Limitations of Generative AI

The Limitations of Generative AI

The Future of AI Ethics

The Future of AI Ethics

The Future of AI Accountability

The Future of AI Accountability

Protect Your Application, Not Just the Network Add Zero Trust Superpowers to Critical Apps & Systems

Protect Your Application, Not Just the Network Add Zero Trust Superpowers to Critical Apps & Systems

DATA Driven approach on vulnerabilities Appsec vs Infra (Panel)

DATA Driven approach on vulnerabilities Appsec vs Infra (Panel)

Let’s go on a DATA with vulnerabilities

Let’s go on a DATA with vulnerabilities

DevSecOps Maturity Model Updates

DevSecOps Maturity Model Updates

Creating the GenAI Athena Bot from the theCyberboardroom.com

Creating the GenAI Athena Bot from the theCyberboardroom.com

Zero Trust Architecture: Strengthening Cloud Security Posture (Panel)

Zero Trust Architecture: Strengthening Cloud Security Posture (Panel)

Anticipating the Future: Strengthening App Security through Developer-Centric Foresight

Anticipating the Future: Strengthening App Security through Developer-Centric Foresight

Threat Modeling Kata Part 3

Threat Modeling Kata Part 3

ChatGPT and GenAI Privacy - Massive Uncertainty and Massive Opportunity

ChatGPT and GenAI Privacy - Massive Uncertainty and Massive Opportunity

Threat Modeling for Serverless Architectures: Identifying Risks in a Serverless World

Threat Modeling for Serverless Architectures: Identifying Risks in a Serverless World

Cloud-Native Security Tools: Enhancing Cloud Protection Capabilities (Panel)

Cloud-Native Security Tools: Enhancing Cloud Protection Capabilities (Panel)

How GenAI Agents will Dramatically Change our Industry

How GenAI Agents will Dramatically Change our Industry

The Cybersecurity Talent Gap: Addressing the Growing Skills Shortage (Panel)

The Cybersecurity Talent Gap: Addressing the Growing Skills Shortage (Panel)

Risk Communication: Bridging the Gap between Risk Professionals and Executives (Panel)

Risk Communication: Bridging the Gap between Risk Professionals and Executives (Panel)

AppSec Threats Deserve Their Own Incident Response Plan

AppSec Threats Deserve Their Own Incident Response Plan

AttackGen: Harnessing Language Models for Cybersecurity Simulations

AttackGen: Harnessing Language Models for Cybersecurity Simulations

Kubernetes Clusters Network Security

Kubernetes Clusters Network Security

Mapping Threat Intelligence: Enhancing Situational Awareness (Panel)

Mapping Threat Intelligence: Enhancing Situational Awareness (Panel)

Shift-Right Security: Emphasizing Post-Deployment Monitoring and Response (Panel)

Shift-Right Security: Emphasizing Post-Deployment Monitoring and Response (Panel)

Talking Vulnerabilities to Executives

Talking Vulnerabilities to Executives

Rise of Automotive Attacks (Panel)

Rise of Automotive Attacks (Panel)

Are Our Users Always Smarter than AI?

Are Our Users Always Smarter than AI?

In the moment nudges – What? How? Applying nudge theory to awareness

In the moment nudges – What? How? Applying nudge theory to awareness

ChatGPT for Security Teams - What & How

ChatGPT for Security Teams - What & How

Taking Your DevOps Tooling To The Dark Side

Taking Your DevOps Tooling To The Dark Side

Continuous Access Control with OPAL and Cedar

Continuous Access Control with OPAL and Cedar

Threat Modeling Kata Part 2

Threat Modeling Kata Part 2

Shift Smart - Risk Based Approach on AppSec

Shift Smart - Risk Based Approach on AppSec

Web Application's Language Negotiation in 2023

Web Application's Language Negotiation in 2023

Women kick off in Cybersecurity

Women kick off in Cybersecurity

Security Vendors - Operating Model

Security Vendors - Operating Model

Zero Trust Database Access Using OpenZiti and JDBC

Zero Trust Database Access Using OpenZiti and JDBC

Risk Treatment Planning in Modern Tech Space

Risk Treatment Planning in Modern Tech Space

ChatGPT impact on Cyber and Application Security

ChatGPT impact on Cyber and Application Security

Threat Modeling Kata

Threat Modeling Kata

Conducting effective Table Top Exercises for Cyber Incident Response Practise (Panel)

Conducting effective Table Top Exercises for Cyber Incident Response Practise (Panel)

Cybersecurity Assessments: Finding the Way Forward

Cybersecurity Assessments: Finding the Way Forward

ChatGPT: Cyber Risks & How to Harden Against Them

ChatGPT: Cyber Risks & How to Harden Against Them

“Shift Left” Isn’t What You Expected

“Shift Left” Isn’t What You Expected

Behaviour Change and Awareness

Behaviour Change and Awareness

The Truth About Suffering a Cyber-attack

The Truth About Suffering a Cyber-attack

Application Security vulnerabilities - Measurements, Maturity Magic

Application Security vulnerabilities - Measurements, Maturity Magic

Developer Driven Security in High-Growth Environments

Developer Driven Security in High-Growth Environments

AWS Security Hub (Panel)

AWS Security Hub (Panel)

An Interactive Session on Teamwork and Collaboration Tools

An Interactive Session on Teamwork and Collaboration Tools

GitHub Security Tools (Panel)

GitHub Security Tools (Panel)

Wardley Maps in Cyber Security - Panel

Wardley Maps in Cyber Security - Panel

Using DataDog for Incident Response (Panel)

Using DataDog for Incident Response (Panel)

Using Elastic for Incident Response (Panel)

Using Elastic for Incident Response (Panel)

Security Design & Guidance at Scale

Security Design & Guidance at Scale

Live Threat Modeling of an "Online Food Ordering" System

Live Threat Modeling of an "Online Food Ordering" System

Finding and Hiring Security Talent (Panel)

Finding and Hiring Security Talent (Panel)

Incident Response Playbooks (Panel)

Incident Response Playbooks (Panel)

How to Operate a Secure Kubernetes Platform

How to Operate a Secure Kubernetes Platform

CISO Role in 2023 (Panel)

CISO Role in 2023 (Panel)

OISRU - Open Information Security Risk Universe (Panel)

OISRU - Open Information Security Risk Universe (Panel)

SOAR - Security Orchestration, Automation, and Response (Panel)

SOAR - Security Orchestration, Automation, and Response (Panel)

An AppSec Guide to Practical Cryptography

An AppSec Guide to Practical Cryptography

How We Build a Security Automation Software Utilizing Open-Source Components (Betterscan.io)

How We Build a Security Automation Software Utilizing Open-Source Components (Betterscan.io)

Living off the Land & Fileless Attacks - Move Beyond the "Known Bad"

Living off the Land & Fileless Attacks - Move Beyond the "Known Bad"

Automation and Scale with OWASP ZAP

Automation and Scale with OWASP ZAP

Low-code Access Control: Making the Complex World of Permissions Approachable to Everyone

Low-code Access Control: Making the Complex World of Permissions Approachable to Everyone

Context is king; Prioritization is Queen, and CVSS is Dead

Context is king; Prioritization is Queen, and CVSS is Dead

Crowdsourcing Security Talent

Crowdsourcing Security Talent

We Need Second-order Thinking in Security

We Need Second-order Thinking in Security

Data Integrity and Information Integrity - They are Enterprise not just CISO Issues

Data Integrity and Information Integrity - They are Enterprise not just CISO Issues

Security Business Enabler: How To Align Your Security Program to Business Goals

Security Business Enabler: How To Align Your Security Program to Business Goals

AMA with Alyssa Miller

AMA with Alyssa Miller

WordPress: Hacking and Securing

WordPress: Hacking and Securing

Cyber Insurance - A Deeper Approach

Cyber Insurance - A Deeper Approach

Using Open Source AppMap for Runtime Security Analysis

Using Open Source AppMap for Runtime Security Analysis

Open Policy Agent

Open Policy Agent

Demystifying Risk and the Future of Vulnerability Management

Demystifying Risk and the Future of Vulnerability Management

Practical Approach/Considerations to Developing a Cybersecurity Program

Practical Approach/Considerations to Developing a Cybersecurity Program

The Survival Guide to Implementing Threat Modeling

The Survival Guide to Implementing Threat Modeling

Quantifying Usability In Security Designs and Risk Assessments

Quantifying Usability In Security Designs and Risk Assessments

Privacy - The Challenges in Post Tornado Cash World

Privacy - The Challenges in Post Tornado Cash World

Women in Cyber Security: Personal Experiences and How to Be an Ally

Women in Cyber Security: Personal Experiences and How to Be an Ally

Threat Modelling as Code v2

Threat Modelling as Code v2

Successes and Failures at Security Training

Successes and Failures at Security Training

Blockchain and its Security

Blockchain and its Security

AMA with Gary McGraw

AMA with Gary McGraw

How to become a cyber security professional? (i.e. where to start?)

How to become a cyber security professional? (i.e. where to start?)

DevSecOps for Modern Identity and Access Management

DevSecOps for Modern Identity and Access Management

AMA with Mark Curphey

AMA with Mark Curphey

Hiring Manager Insights to Secure Your Next Security Role/Team Member

Hiring Manager Insights to Secure Your Next Security Role/Team Member

Overview of the new DSOMM Application

Overview of the new DSOMM Application

Cyber Insurance

Cyber Insurance

Why You Don't Need to be Technical to Get Into Security

Why You Don't Need to be Technical to Get Into Security

Permission Models As Code - Securing the Entire Stack

Permission Models As Code - Securing the Entire Stack

CVSS, CVE, Vulnerabilities and the land of broken dreams

CVSS, CVE, Vulnerabilities and the land of broken dreams

DevSecOps Beyond CI/CD Pipelines

DevSecOps Beyond CI/CD Pipelines

Data Culture

Data Culture

Threat Modelling Adoption in Disciplines Other Than Development

Threat Modelling Adoption in Disciplines Other Than Development

Threat Modeling Failure Modes

Threat Modeling Failure Modes

How do Male and Female Voices Project Authority in Cyber

How do Male and Female Voices Project Authority in Cyber

Resilience Engineering, Safety Science and Systems thinking - new tools for the complex world

Resilience Engineering, Safety Science and Systems thinking - new tools for the complex world

Mentoring and it's Challenges in Cyber Security

Mentoring and it's Challenges in Cyber Security

Bridging the Skill Gap and Hiring Challenges in Cyber

Bridging the Skill Gap and Hiring Challenges in Cyber

Product Permissions - Common Pitfalls and How Not to Fall For Them

Product Permissions - Common Pitfalls and How Not to Fall For Them

Why Wardley Maps changed how I think

Why Wardley Maps changed how I think

Challenge of Auditing Smart Contract Audit with Advanced Cryptographic Primitives like ZKP or MPC

Challenge of Auditing Smart Contract Audit with Advanced Cryptographic Primitives like ZKP or MPC

AMA with Adam Shostack

AMA with Adam Shostack

Using OWASP Nettacker for Recon and Vulnerability Scanning

Using OWASP Nettacker for Recon and Vulnerability Scanning

Applying Zero Trust Principles to OT/ICS (Operational Technology & Industrial Control Systems)

Applying Zero Trust Principles to OT/ICS (Operational Technology & Industrial Control Systems)

Protecting Critical Data Through the Implementation of Information Security Management System

Protecting Critical Data Through the Implementation of Information Security Management System

The value of CTO/CISOs and how to make it work

The value of CTO/CISOs and how to make it work

A Cyber Security Roadmap: How To?

A Cyber Security Roadmap: How To?

Hack your own app!

Hack your own app!

CDC - Collective Defence Clusters

CDC - Collective Defence Clusters

How can we make Grafana a great open source security tool?

How can we make Grafana a great open source security tool?

How to overcome DNS security threats

How to overcome DNS security threats

Beat Alert Fatigue with Cyber Asset Relationship Graphs

Beat Alert Fatigue with Cyber Asset Relationship Graphs

Threat Model for an Autonomous System

Threat Model for an Autonomous System

AppSec Trending & recommendations: Fixing Security in Cloud & Appsec

AppSec Trending & recommendations: Fixing Security in Cloud & Appsec

Docker For Security Professionals

Docker For Security Professionals

Jim and Dinis Talk Appsec

Jim and Dinis Talk Appsec

Kubernetes Security

Kubernetes Security

Adversary Simulation: Close the Gaps in Your Security Posture

Adversary Simulation: Close the Gaps in Your Security Posture

Security Champions - Sharing Experiences

Security Champions - Sharing Experiences

The Human Firewall

The Human Firewall

Open Source Modern Access Control

Open Source Modern Access Control

Secured Digital Workspace

Secured Digital Workspace

A workshop on DAST and how to put it into your pipeline

A workshop on DAST and how to put it into your pipeline

The next Insider Threat isn't your staff!

The next Insider Threat isn't your staff!

Dependency Management and Supply Chain Security

Dependency Management and Supply Chain Security

Security on Autonomous Systems - a Long Way To Go

Security on Autonomous Systems - a Long Way To Go

Ideas for Graph DBs like Neo4j

Ideas for Graph DBs like Neo4j

Open Security Control Testing at Scale

Open Security Control Testing at Scale

Using Runtime Code Execution Maps to Scout Code Security Flaws

Using Runtime Code Execution Maps to Scout Code Security Flaws

Cloud PenTesting Concepts , CloudGoat Walkthrough , Securing Cloud Endpoints

Cloud PenTesting Concepts , CloudGoat Walkthrough , Securing Cloud Endpoints

Using Presentations instead of CVs and Creating Diverse Security Teams

Using Presentations instead of CVs and Creating Diverse Security Teams

Build state of the art SOC with Mitre Attack

Build state of the art SOC with Mitre Attack

Building Security Champions

Building Security Champions

Purple Teaming with OWASP PurpleTeam

Purple Teaming with OWASP PurpleTeam

AMA with Brook Schoenfield

AMA with Brook Schoenfield

When C4s meet Threat Models

When C4s meet Threat Models

Automating Architectural Risk Analysis with the Open Threat Model Format

Automating Architectural Risk Analysis with the Open Threat Model Format

OWASP Top Ten Part 2

OWASP Top Ten Part 2

The Business case for Security Champions

The Business case for Security Champions

CISO Roundtable

CISO Roundtable

Security as Code: A DevSecOps Approach

Security as Code: A DevSecOps Approach

The Cloud Security Architects aka The Knights of the Cloud Kingdom - Panel Discussion

The Cloud Security Architects aka The Knights of the Cloud Kingdom - Panel Discussion

Tune your Toolbox for Velocity and Value (SCA)

Tune your Toolbox for Velocity and Value (SCA)

Doing Compliance Differently: Policies as Code, Evidence-based Compliance through Automation

Doing Compliance Differently: Policies as Code, Evidence-based Compliance through Automation

Threat Models and Wardley Maps

Threat Models and Wardley Maps

Parsec-Hardware Security at Your Fingertips

Parsec-Hardware Security at Your Fingertips