IoT Cornerstones of Security
Explore four cornerstones of IoT security, addressing challenges in constrained environments. Learn how to build security from the start, mitigate threats, and implement effective solutions for connected devices.
All Our APIs Are Belong to Us
Explores Snapchat's strategies to protect users from third-party API abuse, detailing server-side and client-side defenses, their effectiveness, and lessons learned in the ongoing security challenge.
Closing the Security Talent Gap
Practical strategies to address the growing security talent gap, including partnerships with academia, promoting security in job roles, and fostering diversity in the field.
5 Steps to Drive Enterprise Software Security
Learn a disciplined five-step approach to implement enterprise-wide software security initiatives, addressing organizational challenges and ensuring productive application security efforts.
Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
To Bounty or Not to Bounty - Security@ Insights from 500 Organizations
Insights from 500 organizations on vulnerability disclosure programs, analyzing key factors for success and providing a framework to assess program performance and impact.
Sinking Your Hooks in Applications
Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.
The Node.js Highway - Attacks Are At Full Throttle
Explore Node.js security vulnerabilities, attack vectors, and best practices for safeguarding applications in this comprehensive overview of potential threats and defensive strategies.
Client-Side Protection Against DOM-Based XSS Done Right
Comprehensive overview of client-side protection against DOM-based XSS attacks, covering vulnerabilities, prevention techniques, and practical solutions for web security professionals.
Windows Phone App Security for Builders and Breakers
Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.
Security DevOps - Staying Secure in Agile Projects
Explore security integration in agile projects through dynamic depth, static depth, intensity, and consolidation axes. Learn practical DevOps techniques for maintaining security throughout development.
Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life
Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.
Securing the Internet of Things
Explore IoT security challenges and solutions, covering smart devices, common verticals, technologies, and key vulnerabilities in this comprehensive talk on securing the Internet of Things.
Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane
Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.
Scaling Security in Agile Scrum
Learn strategies for integrating security into Agile Scrum development, optimizing interactions between security and engineering teams, and fostering in-house security expertise for efficient monthly releases.
The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers
Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.
Cloud Security at Scale and What it Means for Your Application
Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.
AutoScaling Web Application Security in the Cloud
Explore auto-scaling web application security in cloud environments, focusing on practical examples using AWS. Learn techniques, tools, and strategies for effective security implementation in rapidly scaling applications.
Application Security Playbook for Business
Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.
Flipping the Script on Application Security
Learn about GitHub's developer-first approach to application security, addressing common DevSecOps challenges and exploring innovative solutions like credential scanning and static analysis.
Temporal - Decoded - Leverage Cybersecurity as a Business Enabler
Discover how to transform cybersecurity from a cost center to a business enabler through strategic auditing, stakeholder engagement, and operational integration.