O'Reilly Security Conference 2017 - New York, NY
2017-10-30..2017-11-01
New York, United States
[O'Reilly Security Conference 2016 - Amsterdam, Netherlands, O'Reilly Security Conference 2017 - New York, NY]
who it's for
security engineers, software developers, security managers, engineering managers, devops engineers, product managers, security researchers
topics
ephemeral credentials and rotation; continuous image repaving; CI/CD patch rollout; cloud-native enterprise security; zero trust and device posture; developer-centered secure tooling; secure open source governance; data-centric encryption and DLP; bug bounty versus pentest practices; OSQuery endpoint instrumentation; phishing-aware newsroom training; phishing-resistant authentication (WebAuthn and push)
| title | author | length |
|---|---|---|
| Empowering through security | Fredrick Lee | 05m |
Security is framed as a door opener not a gatekeeper, with a concrete claim: build security into commerce tools so small merchants don’t need to learn VLANs or… | ||
| Why cloud-native enterprise security matters | Matt Stine | 05m |
Covers why slowing change increases risk and gives three concrete defenses against malware APTs and leaked credentials: rotate credentials every few minutes… | ||
| Enterprise security: A new hope | Haroon Meer | 05m |
Claim: corporate security is failing despite huge spending, and offensive teams win mostly because defenses are under-resourced and assumptions are wrong… | ||
| The Dao of defense | Katie Moussouris | 02m |
Argues for a practical framework called the seven chakras of security that maps specific defenses to business goals and capacity, not vague ideals. Claims bug… | ||
| Great software is secure software | Chris Wysopal | 03m |
Central claim: developers must own security and defenders must make that ownership easy and unavoidable. Concrete prescriptions: coaching to teach secure… | ||
| 2017 O'Reilly Defender Awards | Rachel Roumeliotis, Allison Miller | 10m |
Annual awards highlight concrete wins: OSQuery gets cited as an open‑source tool that instruments an environment and dumps state into a SQL database for… | ||
| An infinite set of security tools | Window Snyder | 03m |
Argues that investment in people and engineering fixes beats another layer of endpoint or antimalware noise by delivering measurable risk reductions: prune old… | ||
| Building a culture of security at the New York Times | Runa A. Sandvik | 03m |
Four slides summarize a practical program that trains by workflow not by slogan. The newsroom deliberately opens phishing emails so training focuses on how to… | ||
| The Rebecca Bace Award Presentation at O'Reilly's Security Conference 2017 | Rebecca bass | 04m |
O'Reilly’s 2017 Rebecca Bace Pioneer Award honors Rebecca Bace Pioneer Award first recipient Katie Moo Saurus and the acceptance mixes gratitude with a call to… | ||
| interviewed – Azi Cohen | Azi Cohen | 09m |
WhiteSource describes a live service that scans assembled code, prevents unsafe open source at the gate by surfacing vulnerability status and usage data… | ||
| interviewed – Rich Smith | Rich Smith | 12m |
Cloud-first two‑factor authentication that uses push notifications to beat hard tokens and SMS, integrates U2F hardware tokens and WebAuthn, and prototypes… | ||
| interviewed – Prakash Linga | Prakash Linga | 10m |
Claims a data-centric security model that keeps encryption and access policies attached to files and email everywhere, with encryption at rest, in motion and… | ||
| nothing matches | ||