Security Champions: Introducing Them in Your Organization
Discover how to implement Security Champions in your organization, enhancing developer readiness for security challenges and secure coding practices. Learn about supporting OWASP tools and guidance.
The Supply Chain Conundrum: Why Traditional Application Security Is Failing Us
Explore why traditional app security falls short in protecting against supply chain attacks. Learn proactive, attacker-centric approaches and best practices to safeguard your software development process.
Building a Software Security Program
Discover how to build a comprehensive Software Security Program addressing people, process, and technology challenges in software development, reducing risk and improving efficiency.
Hacking the OWASP Juice Shop
Explore web application security through hands-on hacking of a deliberately insecure e-commerce site, learning about OWASP Top 10 vulnerabilities and ethical hacking techniques.
Find and Fix Software Security Problems - Preventing Security Mistakes
Explore effective strategies for identifying, fixing, and preventing software security issues. Learn how to prioritize and address vulnerabilities to enhance overall system security.
Web Application Firewall - Functionality and Bypass Techniques
Explore web application firewalls, their functionality, and techniques to bypass them in this insightful presentation by security expert Aatif Khan.
OWASP Security Knowledge Framework
Learn about the OWASP Security Knowledge Framework, its features, and how it can enhance your application security practices through this informative presentation by the project creators.
Only an Electron Away from Code Execution
Explore vulnerabilities in Electron-based applications and learn techniques for achieving code execution, presented by security researcher Silvia Väli at Hack.lu 2018.
DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study
探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和运维流程中，提高效率和安全性。
The Software Supply Chain: Challenges and Considerations
Explore the critical aspects and challenges of modern software supply chains in cloud-native environments, focusing on security, efficiency, and best practices.
Application Security for Better Business Value - Expert Insights
Experts discuss how application security practices in cloud-native environments can reduce risks, enhance compliance, and drive innovation, leading to improved business value.
Security Threat Modeling Live from Scratch Session
Hands-on workshop demonstrating lightweight threat modeling for CNCF projects, led by Andrew Martin. Learn practical techniques to identify and mitigate security risks in cloud-native environments.
Handling JWTs: Understanding Common Pitfalls
Explore JWT authentication, common pitfalls, and security best practices. Learn about JWT structure, verification, and protection against attacks like algorithm confusion and secret brute-forcing.
Vanquishing Vulnerabilities - Preparing for Critical CVEs
Prepare for critical vulnerabilities with tools and practices for container image scanning, policy enforcement, network control, runtime configurations, and behavior monitoring.
Security Risks of Low-Code/No-Code Applications - What Could Go Wrong?
Explores security risks of low-code/no-code platforms used by business professionals. Presents research findings, demonstrates common security issues, and introduces OWASP framework for mitigating risks in business-led development.
Perfect Vulnerability Reports and Still Getting Hacked - Limitations of Security Tools
Explore limitations of vulnerability detection tools, challenges in vulnerability management, and strategies for improving application security despite imperfect reporting systems.
Building an Inherently Secure App - Challenges and Best Practices
Explore API-driven app security with Pangea's "Security Platform as a Service," integrating Auth0 by Okta for authorization. Learn to build inherently secure cloud apps across multiple platforms.
Waiting for Creds - The Life of a Penetration Tester
Explore the life of a penetration tester, including career prospects, industry trends, and essential skills. Gain insights from a principal security consultant's experiences in application security and cryptography.
Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall
Explore Zero Trust principles and next-gen Web Application Firewall technology for securing modern cloud applications against sophisticated cyber attacks, featuring Coraza and OWASP CoreRuleSet.
Fixing Security Flaws in Spring Boot Applications with IntelliJ IDEA and Snyk
Learn to identify and resolve security vulnerabilities in Spring Boot applications using IntelliJ IDEA and Snyk. Discover techniques to maintain secure code and manage open-source library risks effectively.
Pwning IoT Devices Through Their Applications - From AppSec to IoT Security
Explore IoT device vulnerabilities through application security techniques, from firmware analysis to code review, leading to six new CVEs and insights on responsible disclosure.