Fighting Advanced Threats at Their Software Roots - Scaling Software Security
Exploring strategies to scale software security beyond developers, addressing vulnerabilities at their roots, and transforming the software ecosystem to combat advanced threats effectively.
Threat Modeling Panel - APPSEC Cali 2018
Expert panel discusses threat modeling techniques, challenges, and best practices in application security, featuring insights from industry leaders at major tech companies.
Taking on the King: Killing Injection Vulnerabilities - APPSEC Cali 2018
Explore strategies to combat injection vulnerabilities, including cross-site scripting, with insights on secure coding practices, framework design, and static analysis tools for improved application security.
The Best Flaw Didn't Make It Into Production - Addressing Security Gaps in Development
Explore innovative approaches to address application security gaps, focusing on timely collaboration between security practitioners and development teams to influence secure coding practices.
Edgeguard: Client-side DOM Security Framework for Detecting Malicious Content - APPSEC Cali 2018
Introducing Edgeguard: an open framework for detecting malicious content in browsers that steals sensitive user data. Learn about this zero-footprint library's approach to enhancing client-side DOM security.
DevSecOps: Integrating People and Automation in Application Security
Explore DevSecOps principles, focusing on human aspects like collaboration, communication, and decision-making to enhance application security within real-world constraints.
The Only Reason Security Matters for DevOps - APPSEC Cali 2018
Explore DevOps' impact on security, focusing on strategic business drivers, modern challenges, and practical recommendations for integrating security into DevOps using a simplified framework.
European Vacation: Leveraging GDPR for Security
Explore how GDPR compliance can drive security initiatives and automate processes, turning a potential burden into a win for application security.
OWASP Top 10 - Application Security Risks
Explore the latest OWASP Top 10 web application security risks with expert Andrew van der Stock. Learn about critical vulnerabilities and effective mitigation strategies for safer software development.
Five Key Trends in Application Security
Explore five crucial application security trends: cloud migration, CDN diversity, API proliferation, compliance challenges, and expanding attack surfaces. Gain insights into cybercriminal tactics and industry recommendations.
Talent Matters: Preventing Burnout and Building Strong AppSec Teams
Caroline Wong discusses preventing burnout, attracting talent, and growing strong application security teams in the face of industry challenges like talent shortages and increasing workloads.
Building an AppSec Program with a Budget of $0 - Beyond the OWASP Top 10
Explore OWASP projects to build a comprehensive AppSec program without spending money. Learn how to implement open-source tools for training, development, testing, and defense to create a robust security framework.
Winning - The Future Perspective in the Next 20 Years
Explore the future of application security with insights on emerging trends, challenges, and strategies for success over the next two decades.
Jumpstarting Your DevSecOps Pipeline with IAST and RASP
Learn to create an effective DevSecOps pipeline using free tools like IAST and RASP. Gain real-time security feedback, continuous vulnerability analysis, and enhanced attack visibility for improved application security.
Temporal: Objects in the Rear View Mirror Are Closer Than They Appear - Application Security Challenges in Cloud Native Era
Explore how software development changes impact application security, challenges in Cloud Native workloads, and strategies for staying secure in evolving tech landscapes.
AppSec Challenges - Overcoming Framework Limitations and Building Robust Security
Exploring challenges in application security, analyzing framework limitations, and discussing robust approaches to improve security at scale while making it more manageable.
Secure Application Design with High Data Privacy Requirements
Explore secure application design strategies for high data privacy, covering identity management, cryptography, logging, and risk management practices.
Start Me Up, Safe - Secure Application Startup Practices
Explore secure startup practices for applications with OWASP expert Ismael Goncalves, focusing on essential techniques to protect your software from the beginning.
Purple Team Strategies for Application Security
Explore purple team strategies for application security, blending red and blue team approaches to enhance vulnerability testing, automation, and security infrastructure integration.
HUNT: Data-Driven Web Hacking and Manual Testing
Turbocharge web hacking with HUNT, a Burp Suite extension using real threat intelligence to provide parameter-level vulnerability suggestions and organize testing methodologies for more thorough assessments.
ReproNow - Saving Time in Reproducing and Triaging Security Bugs
Introducing ReproNow: an open-source tool for efficiently reproducing and triaging security vulnerabilities. This chrome/firefox extension captures researcher's walkthrough, including network requests, streamlining bug validation for security engineers.