Owasp Stickers

Un recordatorio a los programadores o desarrolladores para que tengan en cuenta el código comentado ya que de por sí solo, no marcha solo y se ha de borrar en caso de que no se use más.

Mensaje divulgativo a los programadores o desarrolladores, para que tengan consciencia de no dejar contraseñas o claves en el código, ya que no es una buena practica.

Insecure deserialisation could lead to remote code execution if no proper validation is done previously.

One of the ways to reduce the risk is to limit the impact in case of compromise so practicing least privilege is the way.

Introducing security in DevOps means adapting the security controls and testing during the different steps of the SDLC or development process in an automated fashion. That's why the continuously protecting slogan since DevOps ensures the continuous integration and delivery.

One of the measures to reduce the risk of being compromised is to reduce the attack surface which means, closing ports, disabling unnecessary services or daemons, removing unused accounts and uninstalling not required packages. Therefore, here it comes the Alpine Linux which brings strictly only the necessary components.

The Open Systems Interconnection model is a conceptual model that characterises and standardises the communication functions of a telecommunication or computing system without regard to its underlying internal structure and technology

A media access control address is a unique identifier assigned to a network interface controller for use as a network address in communications within a network segment. This use is common in most IEEE 802 networking technologies, including Ethernet, Wi-Fi, and Bluetooth.

A great design for a mom who is proud of her son or daughter's profession and to give him or her the appropriate recognition.

Any unused ports should not be left open no matter if it is exposed externally or not. Closing them reduces the attack surface, hence, the chances for an eventual attacker to succeed.

This design is for secure coding awareness, because if any of your coworker developers performs git push with secrets, it not only implies the clean up of the secrets on the git repo, but also the clean up the git history which will contain the secrets as well. This is a design with white background.

HTTPOnly flag for cookies should be a must. This avoids other unwanted usages of cookies from your browser like scripts and only restricts its usage for HTTP. Black background with white letters design version.

One of the recommendations of secure coding is to practice pair programming, because 4 eyes catches more than 2 and it is a good way to share context and knowledge between coworkers.

If you passed the OSWE and finally got the certification, then congrats! Reward yourself this design which means that you have tried hard again.

Devops is one of the best ways to follow the agile methodology but, if you include cybersecurity in such mechanisms, it becomes DevSecOps which is a good way to discover vulnerabilities and flaws in the code in earlier development stages in an automated basis. This a second version of the design with icons for each of the word parts.

DevSecOps is an approach to software development that integrates security into the DevOps process, with the goal of delivering secure, high-quality software at a faster pace. A minimalist DevSecOps design would involve a streamlined, focused approach to security, with an emphasis on simplicity and efficiency.

Don't Trust Your Network?

A security funny awareness design to remind developers that secrets, passwords or api tokens is not a good practice.

A powerful message that communicates the importance of protecting our digital world from malicious attacks. Overall, the design should be simple yet powerful, conveying the message that cybersecurity is important and that we all have a role to play in protecting our digital world.

If you think that your architecture doesn't needs to be reviewed then try to threat modeling it. Probably you'll know about new weakness overlooked previously thanks to the different points of view provided by the different participants.

Devops is one of the best ways to follow the agile methodology but, if you include cybersecurity in such mechanisms, it becomes DevSecOps which is a good way to discover vulnerabilities and flaws in the code in earlier development stages in an automated basis.

Welcome to the CTF gamification arena where the blue team and the red team fight each other with one common objective: To proactively detect any vulnerability or weakness before the malicious actors or the bad guys. Use them with proud on such events to show what you are made of!! This is a design version with 4 Blue Team badge pack.

Introducing security in DevOps means adapting the security controls and testing during the different steps of the SDLC or development process in an automated fashion. That's why the continuously protecting slogan since DevOps ensures the continuous integration and delivery. This is a black background design version.

IT operation should be really careful when dealing with domain administrators. The best practice is that it should be only one per domain otherwise, it could be a nightmare to manage.