This page highlights some of the projects, publications, and presentations I’ve been involved in.
Open Source Projects
Tools I’ve developed or contributed to, aimed at automating and simplifying security tasks, primarily within the AWS ecosystem.
Automated Security Helper (ASH)
An open-source application security tool designed to integrate security scanning seamlessly into development pipelines (CI/CD), helping developers embed security testing easily.
AWS Software Composition Analysis Solution
An open-source solution to help automate software composition analysis on AWS.
AWS Config Daily Reporter
A tool to generate daily reports for AWS resource configuration changes.
AWS Security Group Reporter
A tool for reporting on AWS Security Group configurations.
Publications & Written Contributions
Blog Posts & Articles
- Mitigating OWASP Top 10 CI/CD Security Risks using AWS services
- How to automate your software composition analysis on AWS
- How to get a daily report for your resources configuration changes
- Unlocking the Power of Security Orchestration (The New Stack)
Whitepapers & Frameworks
- Cloud Security for Startups 2024
- Understanding Cloud Attack Vectors
- AWS Well-Architected Framework – Security Pillar (Application Security Section)
Presentations, Videos & Demos
Selected talks and demonstrations from conferences, summits, and online platforms.
Featured Talks & Demos
AWS Summit Tel Aviv 2024: Securing EKS Clusters & Incident Response
Cyber Week 2024: Common Threat Actor Tactics (AWS CIRT)
Demo: Automated Security Helper (ASH) Introduction
Conference Talks & Presentations
- Build a more secure generative AI chatbot with security guardrails (AWS re:Inforce 2024) [Slides – PDF]
- Mitigating OWASP Top 10 CI/CD security risks using AWS services (AWS re:Invent 2024) [Slides – PDF]
- Integrating open source security tools with the AWS code services (AWS re:Inforce 2023) [Slides – PDF]
- How to run security incident response in your Amazon EKS environment (AWS re:Inforce 2023) [Slides – PDF]
- Lessons learned from the front lines of Incident Response (AWS Summit Tel Aviv 2022) [Video – Hebrew]
