RSAC 2024

Large Language Models, also known as LLMs, have become an essential part of our daily work routine. OpenAI is a leading company in this field, having launched the first LLM, called ChatGPT, and constantly improving the model by adding new features. One such feature is GPTs, a customizable version of...

Before you can deal with secrets sprawl, you first need to understand how deep the issue of plaintext secrets can be. Improperly stored and shared secrets goes beyond just the top layer of code that you put in production. It affects feature branches, old commits, logs, and communication and collabor...

Find the true positives out of 5 SQLi. You've got 18x18 inch game board, 5 cards, 5 code weaknesses, and a 5-minute sand timer, ready, set, go! You'll have 5 minutes to place the cards in the correct order and find the true positive(s). The winner? Whoever finds the solution in the shortest amount o...

In this session, we will dive into bloated containers, a pressing problem plaguing open source software supply chains. We will discuss this phenomena and demonstrate how to use scanners and the National Vulnerability Database to address bloat in your own containers. The bulk of this session will con...

Join us for a revealing exploration of open-source trust and its vulnerabilities. In this captivating activity, we will delve into the fascinating world of developer credibility and the unsettling phenomenon of faking GitHub contributions. With open source becoming an integral part of software devel...

Pick 5 cards with random levels of difficulty. Answer questions ranging from true/false to multiple choice to spot the vulnerable code. Test your knowledge on risky deployment scenarios, rack up the points, and get to the top of the leaderboard to win!

Join us for an LLM security demo with real-world examples and engage in a trivia game centered around it!

LLM security involves measures and techniques used to ensure the safety, privacy, and integrity of large language models like OpenAI's GPT models. We start with some attacks and stats on LLM...

Before you can deal with secrets sprawl, you first need to understand how deep the issue of plaintext secrets can be. Improperly stored and shared secrets goes beyond just the top layer of code that you put in production. It affects feature branches, old commits, logs, and communication and collabor...

Find the true positives out of 5 SQLi. You've got 18x18 inch game board, 5 cards, 5 code weaknesses, and a 5-minute sand timer, ready, set, go! You'll have 5 minutes to place the cards in the correct order and find the true positive(s). The winner? Whoever finds the solution in the shortest amount o...

Pick 5 cards with random levels of difficulty. Answer questions ranging from true/false to multiple choice to spot the vulnerable code. Test your knowledge on risky deployment scenarios, rack up the points, and get to the top of the leaderboard to win!

Large Language Models, also known as LLMs, have become an essential part of our daily work routine. OpenAI is a leading company in this field, having launched the first LLM, called ChatGPT, and constantly improving the model by adding new features. One such feature is GPTs, a customizable version of...

Join us for a revealing exploration of open-source trust and its vulnerabilities. In this captivating activity, we will delve into the fascinating world of developer credibility and the unsettling phenomenon of faking GitHub contributions. With open source becoming an integral part of software devel...

In this session, we will dive into bloated containers, a pressing problem plaguing open source software supply chains. We will discuss this phenomena and demonstrate how to use scanners and the National Vulnerability Database to address bloat in your own containers. The bulk of this session will con...

Find the true positives out of 5 SQLi. You've got 18x18 inch game board, 5 cards, 5 code weaknesses, and a 5-minute sand timer, ready, set, go! You'll have 5 minutes to place the cards in the correct order and find the true positive(s). The winner? Whoever finds the solution in the shortest amount o...

Before you can deal with secrets sprawl, you first need to understand how deep the issue of plaintext secrets can be. Improperly stored and shared secrets goes beyond just the top layer of code that you put in production. It affects feature branches, old commits, logs, and communication and collabor...

Large Language Models, also known as LLMs, have become an essential part of our daily work routine. OpenAI is a leading company in this field, having launched the first LLM, called ChatGPT, and constantly improving the model by adding new features. One such feature is GPTs, a customizable version of...

Join us for a revealing exploration of open-source trust and its vulnerabilities. In this captivating activity, we will delve into the fascinating world of developer credibility and the unsettling phenomenon of faking GitHub contributions. With open source becoming an integral part of software devel...

Before you can deal with secrets sprawl, you first need to understand how deep the issue of plaintext secrets can be. Improperly stored and shared secrets goes beyond just the top layer of code that you put in production. It affects feature branches, old commits, logs, and communication and collabor...

Find the true positives out of 5 SQLi. You've got 18x18 inch game board, 5 cards, 5 code weaknesses, and a 5-minute sand timer, ready, set, go! You'll have 5 minutes to place the cards in the correct order and find the true positive(s). The winner? Whoever finds the solution in the shortest amount o...

Join us for a revealing exploration of open-source trust and its vulnerabilities. In this captivating activity, we will delve into the fascinating world of developer credibility and the unsettling phenomenon of faking GitHub contributions. With open source becoming an integral part of software devel...

Join us for an LLM security demo with real-world examples and engage in a trivia game centered around it!

LLM security involves measures and techniques used to ensure the safety, privacy, and integrity of large language models like OpenAI's GPT models. We start with some attacks and stats on LLM...