InfoQ Homepage Security Content on InfoQ
-
Are We Ready for the Next Cyber Security Crisis Like Log4shell?
Soroosh Khodami shares a "horror story" on supply chain attacks. He explains how one Maven or npm command can gift hackers a reverse shell and shares critical strategies like SBOMs to defend teams.
/presentations/cyber-security-log4shell/en/mediumimage/Soroosh-Khodami-medium-1774441157934.jpeg)
-
Security and Architecture: to Betray One is to Destroy Both
Shana Dacres-Lawrence discusses the "betrayals" between security and architecture. She explains how delivery pressure and assumed trust lead to failures and shares five strategies for a lasting union.
/presentations/security-architecture-systemic-vulnerabilities/en/mediumimage/shana-dacres-medium-1772017261672.jpg)
-
Panel: Security against Modern Threats
The panelists discuss the challenges in securing the software supply chain against modern threats.
/presentations/security-challenges/en/mediumimage/Son2-1774526589071.jpg)
-
Busting AI Myths and Embracing Realities in Privacy & Security
Katharine Jarmul keynotes on common myths around privacy and security in AI and explores what the realities are, covering design patterns that help build more secure, more private AI systems.
/presentations/ai-systems-privacy-security/en/mediumimage/katharine-jarmul-medium-1771412784942.jpeg)
-
Platforms for Secure API Connectivity with Architecture as Code
Jim Gough explains how "Architecture as Code" and the CALM model bridge the gap between developers and infrastructure, sharing patterns to automate security reviews and accelerate API deployment.
/presentations/secure-connectivity-api/en/mediumimage/jim-gough-medium-1772195933384.jpg)
-
Securing AI Assistants: Strategies and Practices for Protecting Data
Andra Lezza reviews the OWASP Top 10 for LLMs and contrasts security controls for independent vs. integrated copilot architectures.
/presentations/securing-ai-assistants/en/mediumimage/andra-lezza-medium-1764846784380.jpg)
-
Trust No One: Securing the Modern Software Supply Chain with Zero Trust
Emma Yuan Fang discusses how to apply Zero Trust principles to secure the software supply chain and CI/CD pipeline, detailing mitigation for major attacks like SolarWinds and dependency confusion.
/presentations/trust-security-cloud-native/en/mediumimage/emma-yuan-fang-medium-1763029652621.jpg)
-
The Way We Manage Compliance is Wrong… and is Changing! Bringing DevOps Principles to Controls and Audit
Ian Miell shares the open-source Continuous Compliance Framework, discussing how to revolutionize audits. He explains shifting from periodic checks to continuous monitoring with DevOps and OSCAL.
/presentations/compliance-devops-management/en/mediumimage/ian-miell-medium-1761032906689.jpg)
-
Secure by Design: Building Security into Engineering Workflows and Teams
Stefania Chaplin discusses how to build security into engineering workflows and teams. She shares how to achieve a security-first culture by focusing on people, processes, and technology.
/presentations/security-workflow-team/en/mediumimage/stefania-chaplin-medium-1756299628025.jpeg)
-
Designing for Defense: Architecting APIs with Zero Trust Principles
Renato Losio and security experts discuss designing for defense and architecting APIs with Zero Trust principles, covering challenges, common vulnerabilities, and practical advice for developers.
/presentations/zero-trust-principles/en/mediumimage/infoqlive-540x400-1752487145764.jpg)
-
One Network: Cloud-Agnostic Service and Policy-Oriented Network Architecture
Anna Berenberg reveals Google's shift to One Network, streamlining diverse infrastructures to enhance developer velocity and policy management.
/presentations/policy-network-architecture/en/mediumimage/anna-berenberg-medium-1751622407858.jpg)
-
Security or Convenience - Why Not Both?
Dorota Parad discusses the BLISS framework for security, showing senior developers and leaders how to enhance security while boosting engineering productivity and minimizing operational friction.
/presentations/security-productivity/en/mediumimage/dorota-parad-medium-1751009275471.jpg)