Best Practices for Structuring Effective Bug Bounty Programs
Explore best practices for structuring effective bug bounty programs, addressing concerns like security, privacy, and legal issues while maximizing vulnerability identification.
Leveling Up Your Application Security Program
Learn strategies to enhance your organization's application security program, focusing on key improvements and best practices for robust cybersecurity.
Using JIRA to Manage Risks and Security Champions Activities
Learn how to effectively manage risks and security champion activities using JIRA, enhancing your organization's application security practices and workflows.
Practical Threat Modeling with Microsoft's Threat Modeling Tool 2016
Learn practical threat modeling using Microsoft's Threat Modeling Tool 2016. Explore data flow-based techniques, risk assessment, and countermeasures for effective application security.
Maliciously Monetizing AppSec Features - It's All About the Money
Explore malicious monetization of AppSec features with Or Katz and Ezra Caltum. Learn about potential security vulnerabilities and their financial implications in application development.
Issues and Limitations of Third Party Security Seals
Explore limitations of third-party security seals in web applications, uncovering potential vulnerabilities and discussing implications for online security practices.
OpenSAMM Best Practices - Lessons from the Trenches
Experts share insights on implementing OpenSAMM framework for software security, covering optimal maturity levels, integration with agile development, supplier management, and metrics for secure development lifecycle.
PCI DSS and Secure Applications - Best Practices for Compliance
Explore best practices for developing secure applications compliant with PCI DSS requirements. Learn key practices, testing procedures, and evidence needed to meet compliance standards in payment card environments.
OWASP CISO Survey Report 2013 - Tactical Insights for Application Security Managers
Insights from OWASP-CISO Survey 2013: Application security risks, best practices, and management strategies for CISOs. Covers threat sources, investment plans, and security frameworks.
Application Security Training Impact on Developer Code Vulnerability
Explores the effectiveness of application security training for developers through a yearlong survey, revealing surprising insights for risk managers and security strategies.
Mantra OS - Penetration Testing Tools and Methodologies
Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and controlled environment testing techniques.
Introduction to the Newest Addition to the OWASP Top 10 - A9 Guidelines
Experts discuss the new OWASP A9 guideline on insecure open source libraries, offering insights on component usage, best practices, and real-world challenges in mitigating risks in agile development.
Application Security - Challenging Traditional Approaches and Controls
Challenging traditional application security approaches, this talk explores innovative strategies for developing and testing secure software, emphasizing the need for consistency and proactive security measures.
Aim-Ready-Fire: Software Assurance and Cybersecurity Panel Discussion
Panel discussion on software assurance trends, challenges, and best practices in cybersecurity. Industry experts share insights on application security, threat intelligence, and risk management strategies for organizations.
Thinking Differently About Security - What Could Possibly Go Wrong?
Explore innovative security perspectives, blending technical expertise with insights from economics and military history to effectively communicate and address cybersecurity challenges.
OWASP A9: Using Components with Known Vulnerabilities - A Year Later
Explore real-world case studies and industry trends on managing component vulnerabilities in applications, with insights on best practices and challenges in following OWASP A9 guidelines.
11,000 Voices - Experts Shed Light on 4-Year Open Source and AppSec Survey
Experts discuss findings from a 4-year study on open source security practices, revealing surprising trends in policy enforcement, vulnerability tracking, and organizational preparedness for security threats like Heartbleed.
Lean Security for Small or Medium-Sized Businesses
Introduces a framework for SMBs to focus security efforts, discussing prevention, limitation, detection, and response capabilities. Provides cost-effective techniques to transform security into a business enabler.
Lessons in Leadership: Public-Private Sector Collaboration in Global Health
Insights on public-private collaboration in global health, featuring GSK's CEO discussing leadership strategies and the role of private sector in advancing healthcare solutions for developing nations.
BSIMM: A Decade of Software Security Evolution - Keynote
Explore the evolution of software security over a decade, from early concepts to modern practices, highlighting the BSIMM framework for measuring and improving security initiatives in software development.
OWASP Top 10 Mobile Risks: 2014 Reboot
Explore the updated 2014 OWASP Top 10 Mobile Risks, comparing changes since 2011, understanding new threats, and learning recommended fixes for iOS, Android, and Windows Phone platforms.