Engineering Demonstrations
Recorded security engineering sessions, architecture reviews, and hands-on vulnerability analysis.
Why a PHP runtime bug can hit an application with secure code, and how product security finds every install, confirms impact, prioritizes, mitigates and verifies.
How a DEK and a KEK work together, what happens when a user changes or forgets a password, and how to rotate keys without re-encrypting everything.
A practical walkthrough of authentication vs authorization, RBAC, and how trusted JWT claims can scope database queries to prevent IDOR and BOLA.
A practical introduction to CVEs, CVSS, CWE, NVD, and vulnerability prioritization using Log4Shell as an example.