Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API
Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.
Legacy Java Vulnerabilities - Ignore at Your Own Risk
Explore legacy Java vulnerabilities, their persistence, and mitigation strategies. Learn about security risks, update challenges, and alternative approaches for protecting enterprise applications.
Node.js Application Insecurity - OWASP AppSec California 2015
Explore Node.js application security vulnerabilities and best practices. Learn about cross-site scripting, input validation, query languages, and buffer overflows to enhance your web development skills.
.NET Reversing and Exploitation for Cool Kids
Explore .NET reverse engineering and exploitation techniques, including bypassing security features and modifying framework behavior through practical examples and demonstrations.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
The Tales of a Bug Bounty Hunter - 10 Interesting Vulnerabilities
Explore 10 fascinating vulnerabilities discovered by a bug bounty hunter, offering insights into real-world security flaws and their implications for web application security.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.
Ten Secrets to Secure Mobile Applications
Discover key strategies for securing mobile apps, focusing on encryption, web service design, and user privacy. Learn to threat model and address top vulnerabilities using OWASP Mobile Top Ten framework.
iOS App Integrity: Enhancing Security with Encrypted Code Modules
Explore iOS app security vulnerabilities and learn advanced protection techniques like Encrypted Code Modules (ECM) to safeguard against static analysis, binary patching, and other common attacks.
Architecting for Security in the Cloud
Explore cloud security architecture, identifying vulnerabilities, and implementing robust defenses. Learn strategies to protect your applications from various attack vectors and ensure scalable, secure cloud deployments.
How to Spend $3.6 Million on One Coding Mistake - OWASP BeNeLux Day
Explore infamous data breaches, their technical vulnerabilities, and preventive coding solutions. Learn practical techniques to enhance application security and avoid costly mistakes in your development process.
Secure Software Development Framework: Towards an SDL for All SDLCs
Proposes a flexible Secure Software Development Framework adaptable to various development methodologies, enhancing security while maintaining efficiency and ease of adoption for developers and architects.
Node.js and NPM Ecosystem Security Stakes - Lightning Talk
Explore security initiatives in Node.js and NPM ecosystems, recent security reports, and measures taken to address vulnerabilities in modern software development.
Security Best Practices in Azure Cloud
Hands-on overview of implementing security in Azure deployments, covering best practices for various services and secure .NET application deployment.
Security in the Land of Microservices - Challenges and Solutions
Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.
Building a Valid Threat Library for Cloud-Based Applications
Leveraging cloud monitoring and logging to create dynamic threat libraries for Azure and AWS, enhancing application threat models in critical infrastructure sectors like energy and transportation.
Black Clouds and Silver Linings in Node.js Security
Explore Node.js security challenges and mitigation strategies. Learn from real-world incidents to build secure JavaScript applications and understand ecosystem responsibilities.
Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps
Discover how OWASP Dependency-Check enabled large-scale Software Composition Analysis on hundreds of vendor-managed apps, addressing software supply chain risks and patch debt in just two months.
Costly Mistakes in Serverless Computing
Explore common pitfalls in serverless computing and learn how to strengthen your cybersecurity posture when building cloud-based applications.
OWASP ESAPI - A Retrospective: The Good, the Bad, and the Ugly
Explore the history, successes, and challenges of OWASP ESAPI with Kevin Wall. Gain insights into this security project's evolution and lessons learned.
The History and Future of OWASP - 20 Years in Review
Explore OWASP's 20-year journey, its impact on application security, and future directions. Gain insights into the organization's success factors and vision for the next two decades.