Attacking and Protecting Artificial Intelligence
Explore techniques for attacking and defending AI systems, focusing on security vulnerabilities and protective measures in machine learning applications.
Using Bugcrowd and Jira to Streamline Application Security
Streamline application security with Bugcrowd's Jira integration. Learn how to sync vulnerability data, facilitate faster remediation, and improve communication between security and development teams.
Misconfigured CORS and Web Application Security Challenges
Explore CORS misconfiguration vulnerabilities and the challenges of implementing advanced browser security features, with insights on balancing security and operational complexity.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Using Third-Party Components for Building Secure Software - AppSec EU 2016
Explore secure software development, third-party component risks, and maintenance strategies for effective vulnerability management in enterprise applications.
Mobile Application Assessments By The Numbers - A Holistic View
Explore mobile app security through data-driven insights, examining vulnerabilities and best practices for comprehensive assessments in this OWASP presentation.
Security Touchpoints When Acquiring Software
Explore key security considerations and touchpoints in software acquisition, focusing on best practices for ensuring secure integration of third-party solutions.
Security and Insecurity of HTTP Headers
Explore HTTP header security and vulnerabilities with Dirk Wetter. Learn about potential risks and best practices for implementing secure headers in web applications.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.
Hacking the Oracle Application Framework - Deep-Dive Penetration Testing Techniques
Explore deep-dive penetration testing techniques for complex enterprise applications, using Oracle Application Framework as a case study. Learn about static reverse engineering, mock environments, and dynamic monitoring.
Leveraging the ASVS in the Secure Software Development Lifecycle
Integrating OWASP ASVS into the secure software development lifecycle to create uniform security requirements, prioritize tasks, and track adherence across applications using existing tools and processes.
Attacking JSON - Vulnerabilities in Popular Parsers
Explore JSON parser vulnerabilities in .NET and Java, including RCE risks. Learn about attack techniques, vulnerable formats, and mitigation strategies for safer serialization implementations.
Black-Box Approximate Taint Tracking by Utilizing Data Partitioning
Innovative black-box taint tracking system for detecting user input data injection in commands and SQL queries, offering cost-effective and performant runtime protection without code modifications.
Turning Engineers into Extended Blue Team Members - Security Strategies
Strategies for empowering engineers to become part of the security team, including threat modeling, incident-driven learning, and security testing integration into development processes.
Wait Wait Don't Pwn Me - Security News Game Show
A live, security news game show pitting experts against each other in a battle of wits. Audience members can participate, competing for prizes while learning about current security issues in a fun, engaging format.
Mobile Application Security Testing - Journey to Version 2.0
Explore the evolution of mobile app security standards and best practices in this insightful talk on the journey to OWASP Mobile Security Testing Guide v2.0.
Squeezing the Last Drop Out of OWASP Juice Shop
Explore advanced hacking techniques and security challenges in this hands-on session with OWASP Juice Shop, led by its creator Bjoern Kimminich.
Infusing Security Into the Application Development Process
Explore integrating security into software development, covering topics like SBOMs, vulnerability scanning, and supply chain security. Learn practical strategies for secure coding practices.
Rapid Assessment of Service and Application Security - Application Design and Architecture
Learn a rapid methodology to assess application security, identify vulnerabilities, and improve overall security posture. Gain practical skills to evaluate design and architecture, even with limited resources.
Automating TLS Configuration Verification for Web Application Data Stores
Explore best practices for TLS configuration in web application data stores, focusing on MySQL, PostgreSQL, and MongoDB. Learn about tools for verifying proper server setup and survey real-world implementations.