Stronger Together - Cyber Civil Defense at One Year
Explore the Cyber Civil Defense initiative's impact on cybersecurity education and protection. Learn about innovative programs and future strategies for safeguarding digital security.
The Frontlines of Consumer Protection - Privacy, Data Security, and Civil Rights
Exploring consumer protection frontiers: privacy, data security, and civil rights. Experts discuss law enforcement's role in safeguarding public interests against cyber threats and fraud.
Domino's Delivery of a Faster Response - Automated Application Security Engagement
Discover how Domino's Pizza transformed their complex security process into an automated workflow, enhancing response times and efficiency using Atlassian tools, ITSM, and DevOps practices.
Can Our Democracy Survive the Internet? - Challenges and Solutions
Exploring the Internet's impact on democracy, polarization, and information warfare, with insights on combating disinformation and adapting to evolving digital challenges.
OWASP Glue Tool: Security Automation Made Easier
Learn about OWASP Glue Tool, a Ruby gem for security automation that coordinates multiple analysis tools and generates reports, simplifying the process of integrating security into development workflows.
Defensible Application Security for the Artificial Intelligence Era
Exploring trust in the digital world, neuroscience insights, and the impact of AI on application security. Discusses designing scalable, real-time controls to combat intelligent adversaries in the AI era.
(In)Security is Eating the World - Speed and Autonomy for Defense
Explore the future of cybersecurity with Michael Coates as he discusses the need for automation, scale, and speed in addressing critical security failures in our technology-driven world.
Robots with Pentest Recipes - Automating Security Testing in DevOps
Explore automated security testing using Robot Framework to integrate tools like OWASP ZAP and Nmap. Learn to create easy-to-write test recipes for continuous delivery pipelines, enabling cross-team collaboration in application security.
Visualizing Security via LANGSEC
Explore LANGSEC as an alternative to pattern matching in web security. Learn about lexers, tokenizers, and parsers, and discover how to implement LANGSEC for analyzing and preventing security attacks.
Attack Tree Vignettes for Containers as a Service Applications - Risk-Centric Threat Modeling
Explore attack tree vignettes and risk-centric threat models for Containers as a Service applications, focusing on security challenges in cloud adoption and containerization.
HTTPS Everywhere: Improving Web Security and Usability
Exploring Chrome's efforts to enhance HTTPS adoption: tools for debugging, reporting mechanisms for safe rollout, and strategies to improve web security.
Design Approaches for Security Automation
Explore criteria for designing and evaluating security automation tools, including build vs. buy decisions, deployment strategies, and effective implementation for organizational needs.
ClickOnce Exploitation: One-Click Network Foothold - AppSec California 2016
Explore ClickOnce deployment vulnerabilities and learn a new methodology for establishing network footholds through minimal user interaction and phishing techniques.
Preventing Security Bugs through Software Design
Learn strategies to prevent security vulnerabilities through API and framework design, focusing on SQL injection and XSS prevention techniques used successfully at Google.
Taking AppSec to 11: Pipelines, DevOps and Making Things Better
Scaling AppSec through DevOps: Learn strategies to enhance application security programs using pipelines, automation, and iterative improvements for large-scale organizations.
Secure Authentication without the Need for Passwords
Explore behavioral biometrics as a secure, user-friendly alternative to passwords for authentication. Learn how keystroke patterns can provide robust security without compromising usability or privacy.
AppSec++ - Taking the Best of Agile, DevOps, and CI/CD into Your AppSec Program
Learn to optimize AppSec using Agile, DevOps, and CI/CD principles. Discover strategies for scaling security efforts, leveraging automation, and implementing open-source tools to enhance your application security program.
Building Secure Cloud-Native Applications with Spring Boot and Spring
Learn to build secure cloud-native applications using Spring Boot and Spring, focusing on best practices and techniques for robust, scalable, and protected software development.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
Building Your Own Large Scale Web Security Scanning Infrastructure
Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.
Enterprise-wide SSL Automation with Lemur and CloudCA
Explore enterprise-wide SSL automation using Lemur and CloudCA, enabling developers to easily manage SSL certificates and enhance security across applications.