Chunky Cookies - Smashing Application Aware Defenses
Explore application-aware defense bypassing techniques, including data chunking, encryption, and reassembly methods for network traffic manipulation and evasion.
How to Kick Start an Application Security Program
Learn strategies to initiate and implement an effective application security program, covering key steps, best practices, and overcoming common challenges in organizational cybersecurity.
The AppSec Starter Kit
Learn essential tools and techniques for application security, including vulnerability assessment and penetration testing, from expert Timothy De Block.
Royal Testing Purple Teaming to Build and Secure Applications Better
Explore purple teaming techniques to enhance application security and development through a blend of offensive and defensive strategies.
Something Died Inside Your Git Repo - Recognizing the Smell of Insecure Code
Learn to identify and address insecure code within Git repositories, enhancing your ability to maintain secure and robust software projects.
Kick Starting an Application Security Program
Practical guide to launching and improving an application security program, covering tools, processes, and strategies for effective implementation and developer collaboration.
Application Security Metrics
Explore key application security metrics with Caroline Wong, covering portfolio coverage, frequency, fix times, and more for effective cybersecurity management.
Shifting Application Security Left
Explore strategies for integrating security early in the software development lifecycle, enhancing overall application security and reducing vulnerabilities.
Tools and Procedures for Securing .Net Applications
Explore tools and procedures for securing .NET applications, including encryption, active defense monitoring, and security breach strategies.
Securing Code - The Basics
Learn essential techniques for writing secure code, protecting against common vulnerabilities, and implementing best practices in software development.
My First Year in Application Security
Insights and experiences from a first year in application security, offering valuable lessons and perspectives for those entering or interested in the field.
App o Lockalypse Now
Explore advanced application whitelisting bypass techniques and learn to secure Windows systems against sophisticated attacks in this in-depth cybersecurity presentation.
Serverless Security Top 10
Explore top 10 serverless security risks, their impact, and mitigation strategies. Gain insights into cloud evolution and emerging vulnerabilities in serverless architectures.
Mixing and Baking a New AppSec Person - Some Missing Audio
Learn strategies for developing application security professionals, including key skills, training approaches, and industry best practices.
Empathy for the Developer - Lessons Learned Building an Application Security Module
Explore lessons learned in building an application security module, focusing on developer empathy and effective security implementation strategies.
Modern AppSec Gotchas
Explore 12 modern application security challenges and learn effective prevention strategies for web developers and security professionals.
Taking the Next Steps in Cyber Security
Explore career advancement in cybersecurity, covering governance, risk, compliance, networking, certifications, and leadership skills. Gain insights on professional development and industry involvement.
Weaponizing Statistics
Learn to analyze password patterns and improve security through statistical analysis of common password creation techniques.
Code Hedgehogs - Changing the S in SDLC to Secure
Explore secure software development through a gamified approach, learning about vulnerabilities, threat modeling, and building secure coding skills with a unique hedgehog-themed perspective.
Tips to Reduce the Attack Surface When Using Third-Party Libraries
Explore common scenarios, attack surfaces, and best practices for using third-party libraries securely, based on real-world consultations and expert insights.
Trusting SDKs
Explore the risks of including SDKs in applications, with real-world examples of injecting malicious code into 3rd party iOS SDKs using man-in-the-middle attacks.