Browser Fingerprints for a More Secure Web - AppSecCali 2019
Explore how browser fingerprints can enhance web security by detecting session roaming and preventing account takeovers, using machine learning to identify anomalies in device configurations.
Offensive Threat Models Against the Supply Chain
Applying adversarial threat models to supply chain systems, focusing on realistic attack patterns and emulating cybercriminal tactics to enhance defensive measures and risk reduction strategies.
Lessons in Securing Internal Apps - AppSecCali 2019
Lessons and strategies for securing internal applications, including authentication, TLS, Content Security Policy, and leveraging WAFs. Insights on scalable approaches and using internal apps to train security engineers.
How to Start a Cyber War - Lessons from Brussels-EU Cyber Warfare Exercises
Explore nation-state cyber warfare through a realistic game scenario, examining decision-making, tools, and diplomatic challenges. Learn strategies for organizations to improve cybersecurity preparedness and response.
Secure Development - Why Some Product Teams Excel in Security and Others Don't
Explore how product team culture impacts security, using metrics from bug bounty programs and security reviews to identify successful practices and improvement areas for agile organizations.
Leveraging Users' Engagement to Improve Account Security
Explore techniques to enhance account security using breach data, prevention strategies, and user engagement. Learn to correlate signals, improve detection rules, and encourage secure practices.
A Pragmatic Approach for Internal Security Partnerships
Strategies for effective security partnerships with engineering teams, focusing on shared risk views, automation, and integrating security into product roadmaps.
Managing Vulnerability Response Dependencies in Third-Party Components - AppSecCali 2019
Explore a framework for managing dependencies in vulnerability response, enabling proactive PSIRT strategies and improving product security through early-stage decision-making and controls.
Open-Source OWASP Tools for Enhancing Penetration Testing Coverage
Explore open-source OWASP tools for efficient white box penetration testing. Learn about Code Pulse for real-time code coverage and Attack Surface Detector for comprehensive endpoint discovery to enhance security assessments.
Netflix's Layered Approach to Reducing Risk of Credential Compromise
Discover Netflix's multi-layered security approach to protect against credential compromise, featuring innovative tools and strategies for robust infrastructure protection.
A Seat at the Table: Effective Security Collaboration in DevOps - AppSecCali 2019
Discover effective collaboration strategies for security professionals in the DevOps era, focusing on new skills, approaches, and speed to engage early and add value in software development.
Baking Security Into the Software Development Lifecycle - CISO Panel
CISOs discuss strategies for integrating security into rapid application development, sharing real-world experiences on managing evolving methodologies and pressures to publish securely.
The Path of Secure Software Development - AppSec EU 2017
Explore proactive security controls for developers to build safer applications. Learn techniques to address common vulnerabilities and integrate security throughout the development lifecycle.
DevSecOps: Improving Security Posture Through Linguistic Theory
Exploring linguistic theory's impact on security practices, this talk examines how names and metaphors influence organizational processes and interactions to enhance security posture.
Application Security for DevSecOps - Don't Learn, Don't See, Don't Run
Explore the future of DevSecOps with insights on seamless security integration, emerging technologies, and adoption strategies for the next three years in application development.
Monitoring Attack Surface and Integrating Security into DevOps Pipelines
Explore methods for calculating and tracking web application attack surface, and learn to integrate security testing into CI/CD pipelines for effective DevOps practices.
DevSecOps Roundup - An Overview of the Current State
Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.
Open Source Dependencies: Risks and Impacts - AppSec EU 2017
Explore the risks of open-source dependencies in software development, including potential impacts of code removal or malicious modifications on major organizations and applications.
Dangerous Optimizations and the Loss of Causality in C and C++ Programming
Explore compiler optimizations in C/C++ that can lead to software vulnerabilities. Learn about mitigation strategies and the importance of maintaining causality in code.
Making Vulnerability Management Less Painful with DefectDojo
Streamline vulnerability management with DefectDojo: automate deduplication, reporting, and metrics for efficient AppSec programs. Learn how this open-source tool simplifies tedious tasks and enhances team productivity.
Looking Back to Look Ahead: Lessons for Securing Future Code and Systems
Explore the evolution of computing and its impact on security, drawing lessons from the past to safeguard future systems and code in our increasingly connected world.