
Learn strategies to prevent security vulnerabilities through API and framework design, focusing on SQL injection and XSS prevention techniques used successfully at Google.

Scaling AppSec through DevOps: Learn strategies to enhance application security programs using pipelines, automation, and iterative improvements for large-scale organizations.

Explore key capabilities for starting a software security initiative, including penetration testing, code review, and secure design review. Learn benefits, drawbacks, and integration into mature security practices.

Explore the diverse landscape of application security, from sophisticated to absurd, and learn valuable lessons for future security efforts in this engaging keynote by Troy Hunt.

Explore DHS's role in cybersecurity, focusing on industry protection, technology advancement, and fostering trust for robust cyber threat information sharing in this keynote by Dr. Phyllis Schneck.

Explore innovative dynamic methods for automated XSS detection without static payloads, including techniques for Stored XSS and custom exploit generation. Learn to overcome limitations of traditional approaches.

Learn about AppSensor, a framework for detecting and responding to malicious behavior in applications. Discover its benefits, features, and implementation strategies for enhanced security intelligence.

Interactive security news quiz show featuring industry experts testing knowledge on recent AppSec developments. Engaging format with audience participation and challenges like "Bluff the Listener" and "Security Limerick Challenge".

Explore modern malvertising techniques and web-based exploit campaigns. Learn about top malware types, distribution methods, and obfuscation layers through real-world examples and technical walkthroughs.

Alex Stamos discusses evolving application security strategies to protect billions of new internet users, emphasizing safety, real harm prevention, and innovative solutions for a changing digital landscape.

Explore behavioral biometrics as a secure, user-friendly alternative to passwords for authentication. Learn how keystroke patterns can provide robust security without compromising usability or privacy.

Interactive code review techniques using debugging for efficient and effective application security testing, combining penetration testing and code review benefits.

Explore CORS misconfigurations and their exploitation potential, including real-world examples of vulnerabilities in bitcoin exchanges and major websites. Learn about specification flaws and mitigation strategies.

Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.

Explore security challenges in Single Page Applications through an MMA analogy. Learn about SPA frameworks, REST APIs, WebSockets, and interconnectivity to become a "Mixed Multilayer Application Hacker".

Learn to optimize AppSec using Agile, DevOps, and CI/CD principles. Discover strategies for scaling security efforts, leveraging automation, and implementing open-source tools to enhance your application security program.

Explore DDoS and web attacks on cloud platforms, examining tools, methods, and attacker motivations. Learn to identify patterns for better protection against evolving cyber threats.

Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.

Explore attack patterns for black-box security testing in web applications, focusing on methodologies and strategies to identify vulnerabilities effectively.

Explore vulnerability analysis techniques, their strengths and weaknesses, and real-world case studies with security expert Charlie Miller in this engaging keynote from AppSecEU 2016.

Explore interview-based research and consultancy techniques for enhancing application security maturity, fostering security champions, and building quality-minded teams.