Cilium - Network and Application Security with BPF and XDP
Deep dive into BPF technology for application and network security, exploring Cilium's use in distributed systems with Docker for simplified operations and troubleshooting.
Domino's Delivery of a Faster Response - Automated Application Security Engagement
Discover how Domino's Pizza transformed their complex security process into an automated workflow, enhancing response times and efficiency using Atlassian tools, ITSM, and DevOps practices.
Prevent Business Logic Attacks Using Dynamic Instrumentation
Dynamic instrumentation for preventing business logic attacks: Add sensors to source code, collect events, and automate responses in real-time. Extensible tool using open-source libraries, applicable across teams for tailored application security.
OWASP Glue Tool: Security Automation Made Easier
Learn about OWASP Glue Tool, a Ruby gem for security automation that coordinates multiple analysis tools and generates reports, simplifying the process of integrating security into development workflows.
Defensible Application Security for the Artificial Intelligence Era
Exploring trust in the digital world, neuroscience insights, and the impact of AI on application security. Discusses designing scalable, real-time controls to combat intelligent adversaries in the AI era.
OWASP Leaders Workshop - Future Directions and Operational Strategies - Part 2
Explore OWASP leadership strategies, event planning, and community engagement. Learn about future directions, project connections, and operational improvements to enhance local chapters and global initiatives.
The Bug Hunter's Methodology 2.0 - Advanced Web Application Security Testing
Explore cutting-edge techniques and tools for discovering vulnerabilities in web applications, including XSS, SSTI, SSRF, code injection, and more. Learn from expert Jason Haddix's updated methodology for effective penetration testing.
Robots with Pentest Recipes - Automating Security Testing in DevOps
Explore automated security testing using Robot Framework to integrate tools like OWASP ZAP and Nmap. Learn to create easy-to-write test recipes for continuous delivery pipelines, enabling cross-team collaboration in application security.
Hard to Port - A Snapshot of the Vulnerability Landscape in 2015
Explore the 2015 vulnerability landscape through anonymized data, discussing trends, challenges, and the shift towards continuous application security and risk management.
Visualizing Security via LANGSEC
Explore LANGSEC as an alternative to pattern matching in web security. Learn about lexers, tokenizers, and parsers, and discover how to implement LANGSEC for analyzing and preventing security attacks.
Attack Tree Vignettes for Containers as a Service Applications - Risk-Centric Threat Modeling
Explore attack tree vignettes and risk-centric threat models for Containers as a Service applications, focusing on security challenges in cloud adoption and containerization.
Design Approaches for Security Automation
Explore criteria for designing and evaluating security automation tools, including build vs. buy decisions, deployment strategies, and effective implementation for organizational needs.
ClickOnce Exploitation: One-Click Network Foothold - AppSec California 2016
Explore ClickOnce deployment vulnerabilities and learn a new methodology for establishing network footholds through minimal user interaction and phishing techniques.
Preventing Security Bugs through Software Design
Learn strategies to prevent security vulnerabilities through API and framework design, focusing on SQL injection and XSS prevention techniques used successfully at Google.
Taking AppSec to 11: Pipelines, DevOps and Making Things Better
Scaling AppSec through DevOps: Learn strategies to enhance application security programs using pipelines, automation, and iterative improvements for large-scale organizations.
50 Shades of AppSec - Lessons from Diverse Application Security Scenarios
Explore the diverse landscape of application security, from sophisticated to absurd, and learn valuable lessons for future security efforts in this engaging keynote by Troy Hunt.
AppSensor - Real-Time Event Detection and Response for Application Security
Learn about AppSensor, a framework for detecting and responding to malicious behavior in applications. Discover its benefits, features, and implementation strategies for enhanced security intelligence.
Wait, Wait! Don't Pwn Me! - AppSec News Quiz
Interactive security news quiz show featuring industry experts testing knowledge on recent AppSec developments. Engaging format with audience participation and challenges like "Bluff the Listener" and "Security Limerick Challenge".
The Moral Imperatives and Challenges for Modern Application Security
Alex Stamos discusses evolving application security strategies to protect billions of new internet users, emphasizing safety, real harm prevention, and innovative solutions for a changing digital landscape.
Putting an "I" in Code Review - Turning Code Reviewing Interactive - AppSecUSA 2016
Interactive code review techniques using debugging for efficient and effective application security testing, combining penetration testing and code review benefits.
SPArring with the Security of Single Page Applications - MMA Hacker Training
Explore security challenges in Single Page Applications through an MMA analogy. Learn about SPA frameworks, REST APIs, WebSockets, and interconnectivity to become a "Mixed Multilayer Application Hacker".