InfosecGirls Virtual Meet - 28th October, 2024
InfosecGirls Session - 28th October, 2024
Presentor:
Speaker: Yakshita Sharma
Topic: Unveiling vulnerabilities in modern API’s
InfosecGirls Virtual Meet - 22nd September, 2024
InfosecGirls Session - 22nd September, 2024
Presentor:
Speaker: Pretti Rajesh
Topic: Detecting Deepfakes Using AI
InfosecGirls Virtual Meet - 25th March, 2024
InfosecGirls Session - 25th March, 2024
Presentor:
Speaker: Sonya Moisset
Topic: Breaking and Securing AI Workshop
Attack Surface Management - Antara Mane
InfosecGirls Session - Attack Surface Management
Presenter:
Speaker: Antara Mane
Topic: Attack Surface Management and attack surface monitoring
InfosecGirls Virtual Meet - 16th December, 2023
InfosecGirls Session - 16th December, 2023
Year-end wrap-up: community wins, plans for 2024 meetups, and an open floor for appreciation and feedback on virtual programming.
Summary
- Recapped community wins: attendance trends, new chapters, and standout sessions.
- Draft 2024 themes: deeper technical series, career panels, and regional hybrid events.
- Open appreciation for hosts, speakers, and members who welcomed newcomers.
- Feedback on virtual format: timing, accessibility, and desired languages/captions.
InfosecGirls Virtual Meet - 18th November, 2023
InfosecGirls Session - 18th November, 2023
Community session on burnout prevention, sustainable volunteering, and setting boundaries when security work never feels “done.”
Summary
- Named common burnout signals in security and volunteer-led communities.
- Sustainable volunteering: rotate roles, document handoffs, and cap weekly hours.
- Boundaries: async expectations, saying no to scope creep, and manager/lead advocacy.
- Peer resources: employee assistance, therapy access, and peer support channels where available.
InfosecGirls Virtual Meet - 21st October, 2023
InfosecGirls Session - 21st October, 2023
Topic: Detection engineering primer — log sources that matter, high-value use cases, and avoiding alert fatigue for small SOC teams.
Summary
- Prioritised log sources: identity, endpoint, proxy, email, and cloud control plane.
- High-value detections: auth anomalies, rare process chains, and data exfil patterns.
- Alert design: clear runbook links, deduplication, and severity tied to business impact.
- Small-team tactics: borrow community rules, tune aggressively, and measure false positives.
InfosecGirls Virtual Meet - 23rd September, 2023
InfosecGirls Session - 23rd September, 2023
Topic: API security — authentication patterns, rate limiting, abuse cases, and testing APIs consistently in pre-production.
Summary
- Auth patterns: OAuth2/OIDC pitfalls, token lifetimes, and scope validation.
- Rate limiting and abuse detection: per-user, per-IP, and burst handling.
- Abuse cases beyond OWASP API Top 10: scraping, credential stuffing, and partner misuse.
- Pre-prod testing: contract tests, fuzzing, and schema validation in CI.
InfosecGirls Virtual Meet - 12th August, 2023
InfosecGirls Session - 12th August, 2023
Topic: Privacy engineering — data minimisation, retention policies, and privacy reviews alongside security design for new features.
Summary
- Data minimisation: collect only what you need and default to deletion schedules.
- Retention: legal holds vs product analytics; how to document exceptions.
- Privacy review checklist for new features: purpose, consent, transfers, and DPIA triggers.
- Partnering with security on shared threat models that include abuse and insider risk.
InfosecGirls Virtual Meet - 17th June, 2023
InfosecGirls Session - 17th June, 2023
Mentorship mixer: speed introductions, pairing by interest area (GRC, appsec, cloud, SOC), and resources for continued learning over the summer.
Summary
- Speed rounds to match mentors and mentees by timezone and interest track.
- Tracks called out: GRC, application security, cloud, and SOC/detection.
- Shared summer learning list: free courses, labs, and conference watch parties.
- Agreed follow-up cadence for pairs (fortnightly check-ins suggested, flexible).