AppSecUSA 2017 - OWASP Leaders Session
Comprehensive review of OWASP Project and Chapter Leaders' working session, discussing key decisions and actions affecting global operations. Essential viewing for OWASP leadership.
Deep Dive - The Opioid Tsunami: Understanding and Addressing the Crisis
Exploring the opioid crisis: its impact, medical perspectives, and potential solutions. Features experts discussing addiction as a health issue and showcasing new treatments to combat this devastating epidemic.
Software Supply Chain Lifecycle Management: Reducing Attack Vectors and Enabling Rugged DevOps
Exploring software supply chain lifecycle management to reduce attack vectors and enable rugged DevOps, focusing on IoT security, third-party software risks, and standards-based automation for threat detection.
Follow the Money - Investing in Health
Explore the diverse landscape of health investments, from venture capital to social entrepreneurship, and their potential impact on healthcare's future and global well-being.
Leading Better Security Through Mini Hardening Projects
Discover how Mini Hardening competitions in Japan introduce security concepts to beginners, balancing technical challenges with business considerations in a one-day format.
How to Steal Mobile Wallet - Security Risks and Mitigation Strategies
Explores vulnerabilities in mobile contactless payments, demonstrating card cloning and discussing attack vectors, risks, and mitigation strategies for secure mobile wallet implementation.
The Future of Healthcare: People, Data, or Payments - Driving Forces in Care Delivery
Exploring the future of healthcare: patient-centered care, big data's impact, and evolving payment strategies. Experts discuss how these factors will shape healthcare delivery and outcomes.
Fail, Learn, Fix - Improving Security the Old-Fashioned Way
Explore how past failures can drive future security improvements. Learn from historical examples to enhance cloud application security practices and foster collaborative problem-solving.
How to Slay a Dragon - A Three-Step Strategy for Solving Complex Security Problems
Discover a three-step strategy for tackling complex security challenges in Chrome, focusing on incremental progress, accepting imperfections, and considering long-term costs.
Weaknesses in Voice Communications Networks
Explore vulnerabilities in voice communication networks and learn about potential security risks and mitigation strategies for telecom infrastructure.
Lessons From The Legion - OWASP BeNeLux Day 2018
Explore cybersecurity insights from the French Foreign Legion, applying military strategies to digital defense. Gain unique perspectives on threat mitigation and organizational resilience.
Machine Learning vs. Cryptocoin Miners
Explore machine learning techniques to detect and combat cryptocurrency mining malware, enhancing cybersecurity defenses against evolving digital threats.
Empowering the Employee - Incident Response with a Security Bot
Explore how a Slack bot engages employees in incident response, enhancing security awareness and efficiency while providing valuable insights for quick, appropriate action.
Teaching Sustainable Security in DevOps and Agile Environments - AppSecUSA 2018
Strategies for sustainable security in DevOps teams: assessment, training, coaching, automation, and risk management. Avoid common pitfalls and empower teams for long-term security success.
Creating an AppSec Pipeline with Containers in a Week
Explore the journey of setting up an AppSec pipeline using Docker containers, addressing challenges, managing false positives, and optimizing security tools for seamless integration with development teams.
The Evil Friend in Your Browser - Browser Extension Security Risks
Explore the hidden dangers of browser extensions, their security model limitations, and potential risks to user privacy. Learn about real-world analysis findings and discuss improved security measures.
Embedding GDPR into the Software Development Lifecycle
Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, threat modeling, and breach notification processes.
Juggling the Elephants - Making AppSec a Continuous Program
Strategies for implementing a continuous AppSec program that integrates security initiatives, enables DevOps, and addresses portfolio-wide coverage while prioritizing risks and fostering continuous improvement.
Gun Violence as a Public Health Crisis - A Conversation with Dr. Vivek Murthy
Surgeon General Vivek Murthy discusses gun violence as a public health crisis, exploring causes, impacts, and potential solutions with a focus on research, policy, and community engagement.
Remediating XSS in GitHub Open Source Projects - Lessons Learned
Insights on scaling XSS remediation across GitHub open source projects, focusing on risk reduction, adding security controls, and automating code modification for diverse applications.
Creating Accessible Security Testing with ZAP - AppSecCali 2019 Lightning Talk
Introducing OWASP ZAP's Heads Up Display: A new UI that makes security testing more intuitive for developers and professionals, enabling efficient use of the attack proxy tool.