Presentations - Securosis

Presentations - Securosishttps://securosis.com/research/presentations/Recent posts tagged Presentations from SecurosisHugoen-usFri, 24 Jul 2026 20:03:35 +0000The Coming Cloudpocolypse: Disrupting the Cloud Shared Responsibility Modelhttps://securosis.com/research/presentations/cloudpocolypse/Mon, 28 Apr 2025 00:00:00 +0000https://securosis.com/research/presentations/cloudpocolypse/ <p>Chris & Rich’s session at RSAC 2025 <em><strong>The Coming Cloudpocolypse: Disrupting the Cloud Shared Responsibility Model</strong></em>.</p> <p>You can also find the Slides here</p>Security invariants: From enterprise chaos to cloud orderhttps://securosis.com/research/presentations/security-invariants/Tue, 03 Dec 2024 00:00:00 +0000https://securosis.com/research/presentations/security-invariants/ <p>Rich and Chris’s session at re:Invent 2024 on <em><strong>Security invariants: From enterprise chaos to cloud order</strong></em></p> <p>Slides and an accompanying Blog Post that included the re:Invent releases that didn’t make it into our talk.</p>CloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiencyhttps://securosis.com/research/presentations/cloudsec-hero-to-zero/Tue, 07 May 2024 00:00:00 +0000https://securosis.com/research/presentations/cloudsec-hero-to-zero/ <p>Chris & Rich’s session at RSAC 2024 <em><strong>CloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiency</strong></em>.</p> <p>You can also find the Slides here. Read more about the Universal Cloud Threat Model in the research library.</p>The Cloud is Dark and Full of Terrorshttps://securosis.com/research/presentations/dark-and-full-of-terrors/Sat, 02 Oct 2021 00:00:00 +0000https://securosis.com/research/presentations/dark-and-full-of-terrors/ <p>Chris’s presentation to BSides Augusta in 2021 - <em><strong>The Cloud is Dark and Full of Terrors</strong></em></p> <p>Slides and Blog Post are available.</p>Tokenization Guidance Analysis: Jan 2012https://securosis.com/research/presentations/tokenization-guidance-analysis-jan-2012/Thu, 19 Jan 2012 00:00:00 +0000https://securosis.com/research/presentations/tokenization-guidance-analysis-jan-2012/ <p>Our discussion of the PCI Council’s Tokenization Information Supplement.</p> <p>Tokenization Guidance (PDF)</p> <h5 id="attachments">Attachments</h5> <hr> <ul> <li>TokenGuidanceImg.png [354KB]</li> <li>TokenizationGuidanceAnalysis_Jan_2012.pdf [1.1MB]</li> </ul>Security + Agile = FAIL Presentationhttps://securosis.com/research/presentations/security-agile-fail-presentation/Mon, 13 Sep 2010 00:00:00 +0000https://securosis.com/research/presentations/security-agile-fail-presentation/ <p>From the AppSec US 2010 OWASP conference.</p> <p>Security+AgileFAIL_OWASP.ppt_.pdf (PDF)</p>Database Audit Eventshttps://securosis.com/research/presentations/database-audit-events/Tue, 06 Oct 2009 00:00:00 +0000https://securosis.com/research/presentations/database-audit-events/ <p>This is a reference page for database events commonly captured in the Audit Logs for major relational database platforms.</p> <p>SQL Server (pdf) Sybase (pdf) DB2 (pdf) Oracle (pdf)</p>XML Security Overview Presentationhttps://securosis.com/research/presentations/xml-security-overview-presentation/Fri, 11 Sep 2009 00:00:00 +0000https://securosis.com/research/presentations/xml-security-overview-presentation/ <p>This presentation provides and executive summary of XML security issues: XML_SecurityOverview.pdf</p>Presentation: Web Application Security Programhttps://securosis.com/research/presentations/presentation-web-application-security-program/Fri, 24 Jul 2009 00:00:00 +0000https://securosis.com/research/presentations/presentation-web-application-security-program/ <p>Our presentation on Building A Web Application Security Program. This was presented as supplementary material to the white paper of the same name.</p>Understanding Cloud Security in 30 Minutes or Lesshttps://securosis.com/research/presentations/understanding-cloud-security-in-30-minutes-or-less/Fri, 24 Jul 2009 00:00:00 +0000https://securosis.com/research/presentations/understanding-cloud-security-in-30-minutes-or-less/ <p>This is a quick presentation Rich gave at an ISSA/ISACA meeting in June, 2009.</p> <h5 id="attachments">Attachments</h5> <ul> <li>30MinuteCloud.pdf [2.9MB]</li> </ul>Building A Web Application Security Program (Presentation)https://securosis.com/research/presentations/building-a-web-application-security-program-presentation/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/building-a-web-application-security-program-presentation/ <p>Our presentation on Building A Web Application Security Program. This was presented as supplementary material to the white paper of the same name.</p>Data Breaches and Encryptionhttps://securosis.com/research/presentations/data-breaches-and-encryption/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/data-breaches-and-encryption/ <p>Presentation on Data Breaches and Encryption.</p>Data Centric Security Lifecyclehttps://securosis.com/research/presentations/data-centric-security-lifecycle/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/data-centric-security-lifecycle/ <p>Our presentation on Information Centric Data Security and the Data Centric Security Lifecycle.</p>Data Protection in the Enterprisehttps://securosis.com/research/presentations/data-protection-in-the-enterprise/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/data-protection-in-the-enterprise/ <p>This Presentation, called Data Security Lifecycle and Standards, and sometimes Data Security in the Enterprise, covers basic data security considerations for all aspects of data as it is used across the enterprise. This is an overview presentation.</p>Database Activity Monitoringhttps://securosis.com/research/presentations/database-activity-monitoring/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/database-activity-monitoring/ <p>Understanding and Selecting a Database Activity Monitoring Solution. This presentation is a companion to the white paper of the same name.</p>Integrating Penetration Testinghttps://securosis.com/research/presentations/integrating-penetration-testing/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/integrating-penetration-testing/ <p>Integrating Penetration Testing into a Web Application Security Program.</p>Oracle Database Security in a Down Economyhttps://securosis.com/research/presentations/oracle-database-security-in-a-down-economy/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/oracle-database-security-in-a-down-economy/ <p>This is a presentation specific to things you can do to improve Oracle Database Security when budgets are tight.</p>Protecting Mobile Datahttps://securosis.com/research/presentations/protecting-mobile-data/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/protecting-mobile-data/ <p>Presentation on Securing Mobile Data and mobile media.</p>SIM, SEM, and Log Managementhttps://securosis.com/research/presentations/sim-sem-and-log-management/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/sim-sem-and-log-management/ <p>This presentation covers SIM, SEM, and Log Management solutions and how they aid in compliance efforts.</p>Understanding Data Loss Preventionhttps://securosis.com/research/presentations/understanding-data-loss-prevention/Tue, 16 Jun 2009 00:00:00 +0000https://securosis.com/research/presentations/understanding-data-loss-prevention/ <p>This presentation, Understanding and Selecting a Data Loss Prevention Solution, is a companion to the white paper on the same subject.</p>