Eliminating Passwords for Enhanced Security - APPSEC CA 2017
Explore password elimination for enhanced security. Learn about device fingerprinting, dynamic mobile authentication, and innovative approaches to secure login without traditional passwords.
Securing In-House Execution of Unsafe Third-Party Executables
Explore a framework for securely executing third-party code in production environments, addressing challenges and implementing best practices to mitigate risks associated with untrusted executables.
Hacking Hate and Extremism - Combating Online Extremism and Promoting Digital Literacy
Explore strategies to combat online hate, extremism, and misinformation through technology, innovation, and grassroots efforts promoting digital literacy and pluralism.
Eradicating Vulnerability Classes: Embracing Secure Defaults and Invariants
Explore innovative approaches to application security, focusing on secure defaults and invariants instead of traditional SAST methods to effectively eliminate vulnerability classes.
Who Deserves Cybersecurity? Expanding Our Circle of Care
Eva Galperin explores expanding cybersecurity access for vulnerable populations, drawing on her expertise in privacy, malware research, and advocacy for digital rights and protection worldwide.
OWASP Distinguished Lifetime Member Award - Jeff Williams' Contributions
Explore Jeff Williams' contributions to OWASP, including foundational projects, non-profit creation, and innovative security concepts, in this insightful 20th anniversary recognition.
WebAuthn - Balancing Strong Authentication, Privacy, and Convenience
Explore the balance between robust authentication, user privacy, and ease of use in WebAuthn implementation for enhanced online security.
Do Certain Types of Developers or Teams Write More Secure Code?
Explore factors influencing secure code development, including team dynamics, developer experience, and human factors. Gain insights into improving software security practices.
Scaling Security through Context-Based Security Assessments
Streamlining security assessments through context-based automation, enabling efficient scaling and tailored workflows for product security teams in rapidly growing organizations.
Leave It to the Machines - AI and ML in Container Security
Explore how AI and ML empower security teams to proactively secure container-based applications, shifting left security capabilities and streamlining the development process.
Changed Responsibilities in Modern Development Practices
Explore how modern development practices like CI/CD and DevOps impact application security. Learn strategies for integrating security early in the development lifecycle and empowering developers with essential security skills.
Making Continuous Security a Reality with OWASP's AppSec Pipeline
Learn to implement continuous security testing using OWASP's AppSec Pipeline tool. Discover field-tested methods, Docker containers for automation, and integration with OWASP Defect Dojo for issue management.
Time Lock Puzzles for Good and Evil
Explore timelock puzzles in cybersecurity: their history, offensive and defensive applications, novel constructions, weaponization techniques, detection methods, and challenges in both malicious and benign use cases.
Scaling Security in Leading Companies - DevOps and CI/CD Best Practices
Discover pro-tips and actionable lessons from mature security teams on scaling security in modern software development. Learn effective strategies for buy-in, engineering projects, analysis integration, and production monitoring.
Don't Feed the Hippos - Improving Security Communication with Developers
Explore common security communication failures and learn effective strategies for collaborating with developers to address software vulnerabilities and enhance overall security practices.
Secure Coding Lessons for Mobile Apps - Insights from the Trenches
Explore common mobile app coding pitfalls, their real-world impacts, and learn effective strategies to enhance security. Includes demonstrations of attacker techniques and protective code samples.
Threat Modeling of Containerized Applications - Three Levels of Complexity
Optimize threat modeling for containerized applications, focusing on efficiency, new dimensions, and real-world impact. Learn to measure success and implement incremental improvements in application security.
Looking Towards the Future of Open Source Vulnerability Management
Explore the evolving landscape of open source security, focusing on vulnerability management strategies, industry trends, and best practices for effective remediation and continuous security integration.
Learn to Exploit TOCTOU Race Condition Vulnerabilities with OWASP TimeGap Theory
Explore TOCTOU race condition vulnerabilities and learn exploitation techniques using OWASP TimeGap Theory in this comprehensive cybersecurity session.
Don't Worry, Be API - Addressing AppSec's Modern Challenge
Explore modern API security challenges and solutions, including OWASP API Security Top 10, authentication issues, and authorization vulnerabilities in this comprehensive overview.
Security vs. Liberty - Balancing Cybersecurity and Civil Rights in the Digital Age
Debate on balancing security and liberty in cyberspace, exploring encryption, social media's role in terrorism, and government access to digital communications.