Application Threat Modeling Implementation Tips and Tricks
Learn essential tips and techniques for implementing application threat modeling, including DFD design for microservices and client-side frameworks, and effective threat identification and risk analysis strategies.
The How and Why of the OWASP Top Ten 2021
Explore the OWASP Top Ten 2021 update, its significance, and data-driven insights. Learn about critical application security risks, analysis methodologies, and industry impact.
Data-Driven AppSec Champions Programs - Benchmarking Your Program with Numbers
Insights from a survey of 26 innovative AppSec champions programs, covering best practices in recruitment, training, communication, and ROI measurement to enhance software security.
Building Security Champions - Creating and Sustaining Effective Programs
Learn to build an effective security champions program: recruiting, training, engaging, and motivating champions to scale security efforts across your organization.
OWASP Open Application Security Curriculum
Comprehensive overview of OWASP's initiative to develop an open, standardized application security curriculum for undergraduate and postgraduate education, addressing the skills gap in the security sector.
Ending Injection Vulnerabilities
Learn how programming languages can prevent injection vulnerabilities by distinguishing trusted developer strings from potentially attacker-controlled input, ensuring safer handling of user values in sensitive contexts.
Securing Modern Applications and APIs Against Attacks
Explore effective API security strategies for modern applications, focusing on deep application knowledge and user behavior to protect against evolving threats in cloud-native architectures.
OWASP ZAP and DeepFactor - Continuous AppSec Observability for DevSecOps
Explore how DeepFactor's observability enhances OWASP ZAP for comprehensive DevSecOps, detecting security risks in modern cloud-native applications through advanced event monitoring.
25 Years in AppSec: Looking Back and Forward
Adam Shostack reflects on 25 years in AppSec, discussing progress, challenges, and future trends. He explores AI's impact, evolving security landscapes, and the importance of trust and learning systems.
SecDevOps - Integrating Security into Development and Operations
Explore SecDevOps: integrating security into CI/CD pipelines, securing development environments, and implementing security as code for robust cybersecurity from the start.
Securing the Future: Challenges and Innovations in Application Security
Insightful keynote address exploring cutting-edge application security trends, challenges, and best practices in the rapidly evolving digital landscape.
Opening Remarks and Keynote on Application Security - 2022 Global AppSec San Francisco
Explore cybersecurity insights and industry trends with opening remarks and a keynote address by Anna Westelius at the 2022 Global AppSec San Francisco conference.
Application Security Best Practices - 2022 Global AppSec Keynote
Explore cutting-edge application security insights and strategies with industry expert Jim Manico in this thought-provoking keynote address from the 2022 Global AppSec conference.
Cybersecurity Trends and Challenges - 2022 Global AppSec Keynote
Explore cutting-edge application security insights and trends with Simon Bennetts' keynote address at the 2022 Global AppSec conference in San Francisco.
Introducing Threat Modeling to Established Teams
Learn effective strategies for implementing threat modeling in established teams, enhancing security practices and fostering a proactive approach to identifying potential vulnerabilities.
Trusting Software: Runtime Protection as the Third Alternative
Explore runtime protection as a crucial alternative for software security, offering insights into its implementation and benefits for robust application defense.
TOTPs Are Not As Secure As You Might Believe
Explore vulnerabilities in Time-based One-Time Passwords (TOTPs) and learn strategies to enhance their security in authentication systems.
Credential Sharing as a Service: The Dark Side of No-Code
Explore the security risks of no-code platforms and credential sharing services, uncovering potential vulnerabilities and mitigation strategies for modern application development.
Ten DevSecOps Culture Failures
Explore common pitfalls in implementing DevSecOps culture and learn strategies to overcome them for more effective security integration in software development.
More with Less Screen Time: An Application Security Toolchain
Discover efficient application security strategies and toolchains to maximize productivity while minimizing screen time in this insightful conference talk by Spyros Gasteratos.
Empowering the Guardians of Your Code Kingdom
Explore strategies for empowering developers to become guardians of code security, enhancing application protection and fostering a security-first mindset in software development.