AppSec++ - Taking the Best of Agile, DevOps, and CI/CD into Your AppSec Program
Learn to optimize AppSec using Agile, DevOps, and CI/CD principles. Discover strategies for scaling security efforts, leveraging automation, and implementing open-source tools to enhance your application security program.
How to Find the Next Great Deserialization CVE - AppSecUSA 2016
Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.
Attack Patterns for Black-Box Security Testing - AppSecEU 2016
Explore attack patterns for black-box security testing in web applications, focusing on methodologies and strategies to identify vulnerabilities effectively.
Storytelling Techniques for Application Security - Beyond Penetration Testing
Explore interview-based research and consultancy techniques for enhancing application security maturity, fostering security champions, and building quality-minded teams.
From DTD to XXE - An Evaluation of XML Parsers
Comprehensive evaluation of XML parsers, exploring vulnerabilities from DTD to XXE attacks. Gain insights into secure XML parsing and learn to mitigate potential security risks.
AppSec Awareness - A Blueprint for Security Culture Change
Discover strategies for building a sustainable security culture through AppSec awareness, focusing on human factors, knowledge sharing, and effective program architecture.
From Facepalm to Brain Bender - Advanced Web Security Challenges
Explore web security challenges, from basic vulnerabilities to complex exploits, with insights from industry experts on detection, prevention, and mitigation strategies.
Open Source Approaches to Security for Applications and Services - Mozilla Case Study
Explore open-source security approaches for applications and services, covering threat modeling, bug bounties, and measuring security effectiveness in Mozilla's ecosystem.
Building Secure Cloud-Native Applications with Spring Boot and Spring
Learn to build secure cloud-native applications using Spring Boot and Spring, focusing on best practices and techniques for robust, scalable, and protected software development.
Why Secure Development Programs Are Essential for Application Security
Explore integrating application security into development processes, focusing on proactive measures, resource allocation, and adapting to Agile and DevOps methodologies for effective risk management.
OWASP Security Knowledge Framework - Project Overview and Best Practices
Explore OWASP Security Knowledge Framework with project lead Glenn Ten Cate, discussing goals, milestones, and best coding practices for this essential security tool.
Bringing Security Testing to Development: Enabling Developers as Security Experts
Discover strategies for integrating security testing into development processes, empowering developers to become security experts and enhance application safety.
Abusing JSONP With Rosetta Flash - AppSec EU 2015
Explore JSONP vulnerabilities and the Rosetta Flash exploit technique in this cybersecurity talk, uncovering potential risks and defense strategies for web applications.
Dark Fairytales From A Phisherman - Application Security
Explore phishing techniques and strategies through dark fairytales, offering insights into cybersecurity threats and prevention methods for application security professionals.
50 Shades of Application Security
Explore diverse aspects of application security, from democratization of hacking to user experience and government involvement, in this comprehensive overview by Troy Hunt.
Running a Bug Bounty Program - What You Need to Know
Discover essential insights for running successful bug bounty programs, including strategies, resources, and best practices for effective vulnerability management and rewards.
Scanning with Swagger - Using the Open API Specification to Find Vulnerabilities
Explore leveraging Open API specification for enhanced security scanning, uncovering vulnerabilities and improving application protection strategies.
OWASP CISO Survey Report: Tactical Insights for Managers
Gain tactical insights for managers from OWASP's CISO Survey Report, covering threat sources, risks, trends, investments, challenges, and strategies for effective application security management.
The Timing Attacks They Are A-Changin' - Web-based and Browser-based Timing Attack Techniques
Explore evolving timing attacks in web security, from classic cross-site techniques to browser-based methods, and learn effective mitigation strategies.
Working with the Security Community - A Decade of Evolution
Veteran security expert reflects on a decade of application security evolution, community interactions, and future trends in vulnerability management and response.
Fixing the Unfixable: Solving Pervasive Vulnerabilities with RASP
Explore runtime application self-protection (RASP) as a solution for unfixable vulnerabilities like Java deserialization. Learn about RASP approaches and a free, open-source agent to neutralize attacks.