Addressing Security Requirements in Development Projects
Learn effective strategies for integrating security requirements into development projects, covering artifact creation, requirement generation, filtering, and customization.
Everything You Need to Know About Certificate Pinning - AppSecEU 2016
Comprehensive guide to certificate pinning: implementation, benefits, and potential pitfalls. Essential knowledge for enhancing mobile app security and protecting against man-in-the-middle attacks.
Implementing a Supply Chain Approach to Build and Deploy Secure Applications - AppSecEU 2016
Explore implementing a supply chain approach to build and deploy secure software, focusing on trust, standardization, and automation in the software delivery pipeline.
The Internet of Broken Things - Future Challenges of Global Cybersecurity
Explore cybersecurity threats facing the US with Lisa O. Monaco, Obama's counterterrorism advisor. Discuss Russian hackers, Chinese spies, and IoT botnets, examining future challenges and opportunities for national security.
Security and Modern Software Deployment - AppSec EU 2015
Explore modern software deployment security challenges, including trust issues, dependencies, and repository vulnerabilities. Learn strategies to mitigate risks and enhance deployment security.
Making SSL Warnings Work - Improving Security and User Experience
Explore strategies to improve SSL warnings in Chrome, focusing on reducing false positives and enhancing user understanding of security threats through clear design and communication.
Shameful Secrets of Proprietary Network Protocols
Reverse engineering proprietary protocols: case studies revealing security flaws in financial software, home automation, and embedded systems. Techniques for uncovering hidden vulnerabilities in undocumented binary protocols.
Lessons from Trusting JavaScript Cryptography - Biting into the Forbidden Fruit
Exploring real-world JavaScript cryptography implementations, debunking myths, and providing an updated perspective on JS crypto security through vulnerability analysis and practical examples.
Threat Modeling - A Brief History and the Unified Approach at Intuit
Unified approach to threat modeling combining STRIDE and asset-based methods. Focuses on identifying assets, attacker profiles, and controls for software architecture and system deployments.
Hybrid Analysis Mapping - Making Security and Development Tools Play Nice Together
Explore techniques for integrating security testing and development tools, improving collaboration between testers and developers for more effective application security and code quality.
Getting a Handle on Mobile Security
Comprehensive overview of mobile security challenges and best practices, covering encryption, data protection, and platform-specific concerns for developers building secure mobile applications.
Frameworks and Theories in Application Security - OWASP AppSec Europe 2014
Comprehensive coverage of AppSec Europe 2014 conference, featuring expert talks on anonymous communications, threat modeling, risk analysis, and web security. Insights for developers and security professionals.
OWASP AppSec Europe 2014 - Builder and Breaker Track Sessions
Explore cutting-edge web security topics including DevOps, JavaScript vulnerabilities, XSS detection, Windows Store app testing, developer training effectiveness, and automated authorization checks.
OWASP Reverse Engineering and Code Modification Prevention Project
Explore reverse engineering risks and prevention techniques for application security experts. Learn about code integrity, data validation, and architectural principles to protect software in untrusted environments.
OWASP HIVE Project - Welcome to the Grid
Explore OWASP HIVE, an innovative learning platform using small PCs. Learn about file systems, storage, grid stats, security, and more in this informative webinar on cybersecurity infrastructure.
Building Secure Containers for Mobile Devices
Explore secure container solutions for BYOD environments, covering application wrapping, design challenges, iOS runtime analysis, and implementation best practices for mobile data protection.
Introduction to the Newest Addition to the OWASP Top 10 - A9 Guidelines
Experts discuss the new OWASP A9 guideline on insecure open source libraries, offering insights on component usage, best practices, and real-world challenges in mitigating risks in agile development.
AppSec at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time vulnerability detection, enhanced architecture, and proactive collaboration across entire IT portfolios.
The New Normal? Addressing Frequent Small-Scale Terrorist Attacks
Experts discuss the evolving nature of terrorist attacks, focusing on smaller-scale incidents targeting soft targets and their implications for security strategies and public safety.
PiOSoned POS - A Case Study in iOS-Based Mobile Point-of-Sale Security Flaws
Explore security vulnerabilities in iOS-based mobile point-of-sale systems, including coding mistakes, platform misunderstandings, and hardware weaknesses. Learn best practices for securing mobile POS applications.
Use After Free Exploitation - Detecting and Exploiting Heap Vulnerabilities
Explore Use After Free vulnerabilities, their detection, and exploitation in web browsers. Learn about memory leaks and ASLR bypass techniques from an industry expert.