InfoQ Homepage Security Content on InfoQ
-
Dare Mighty Things: What NASA's Endeavors Teach Us about the Power of Calculated RISCs
Khawaja Shams explores the essence of calculated risks, discussing why these risks are worth taking, how to identify and mitigate potential downsides, and the characteristics of good risks.
/presentations/nasa-calculated-risks/en/mediumimage/khawaja-shams-medium-1740573020029.jpeg)
-
A Zero Trust Future for Applications: Practical Implementation and Pitfalls
Ashish Rajan shares a practical guide to working on zero trust, exploring where it fails before it starts and where engineers should see quick wins. Surprisingly, the answer is not really DevSecOps.
/presentations/zero-trust-devsecops/en/mediumimage/ashish-rajan-medium-1738148760241.jpeg)
-
Flawed ML Security: Mitigating Security Vulnerabilities in Data & Machine Learning Infrastructure with MLSecOps
Adrian Gonzalez-Martin introduces the motivations and the importance of security in data & ML infrastructure through a set of practical examples showcasing "Flawed Machine Learning Security".
/presentations/mlsecops/en/mediumimage/adrian-gonzalez-medium-1737539353155.jpeg)
-
Efficient DevSecOps Workflows with a Little Help from AI
Michael Friedrich tells a story about experienced pain points, wasted hours debugging and solving, and learning how a little help from AI makes DevSecOps workflows efficient again.
/presentations/devsecops-ai/en/mediumimage/MichaelFriedrich-medium-1734515745316.jpg)
-
From Anti-Patterns to Best Practices: a Practical Guide to DevSecOps Automation and Security
Spyros Gasteratos discusses security patternsand provides alternatives to detrimental practices, along with a compilation of free and open-source tools endorsed by the community.
/presentations/security-best-practices-tools/en/mediumimage/Spyros-Gasteratos-medium-1733145877904.jpg)
-
Trends in InfoSec: Data Minimization, Autoclassification, and Ethical AI
Rachael Greaves provides a summary of the requirements for data lifecycle management, the technology approaches, and the risks, and includes a Data Minimization Best Practice Checklist.
/presentations/trends-infosec/en/mediumimage/RachaelGreaves-medium-1731486542179.jpeg)
-
Beyond the Breach: Proactive Defense in the Age of Advanced Threats
Michael Brunton-Spall discusses some of the most advanced attacks that are in the public domain, mostly attributed in public by commercial organizations.
/presentations/security-advanaced-threats/en/mediumimage/michael-medium-1726825001794.jpg)
-
Best Practices to Secure Web Applications
Loiane Groner discusses the best practices for secure coding, input validation techniques, the importance of strategic error handling and logging, and how to manage file uploads safely.
/presentations/practices-web-app-security/en/mediumimage/LoianeGroner-medium-1726126468139.jpg)
-
Risk and Failure on the Path to Staff Engineer
Caleb Hyde discusses their career progression and regressions, as well the context they used to figure out what to work on and whom to work with, distilling a framework to utilize in one’s own work.
/presentations/risk-failure-staff/en/mediumimage/CalebHyde-medium-1719490511687.jpg)
-
Defensible Moats: Unlocking Enterprise Value with Large Language Models
Nischal HP discusses risk mitigation, environmental, social, and governance (ESG) framework implementation to achieve sustainability goals, strategic procurement, spend analytics, data compliance.
/presentations/risk-mitigation-llm/en/mediumimage/NischalHP-medium-1718109596117.jpg)
-
NIST 800-207A: Implementing Zero Trust Architecture
Zack Butcher discusses the forthcoming Special Publication 800-207A on a Zero Trust Architecture (ZTA) model for access control in cloud native applications in multi-location environments.
/presentations/nist-800-207a/en/mediumimage/ZackButcher-medium-1708505687503.jpg)
-
How DoorDash Ensures Velocity and Reliability through Policy Automation
Lin Du discusses the details of their approach at DoorDash; how they enabled their engineers to self-serve infrastructure through policy automation while ensuring both reliability and high velocity.
/presentations/policy-automation-velocity-reliability/en/mediumimage/LinDu-medium-1706689451713.jpg)