HTTPS Security Headers: HSTS, TLS, HPKP, and CSP Implementation - APPSEC CA 2017
Comprehensive guide to implementing HTTPS using HSTS, TLS, HPKP, and CSP. Learn best practices for secure web communication from Salesforce security experts.
DASTProxy: Automated Security Testing Focused on Business Context
Explore DASTProxy: a tool for automated security testing that focuses on business context rather than crawling, enhancing efficiency and effectiveness in application security assessments.
Monitoring Application Attack Surface to Integrate Security into DevOps Pipelines
Explore integrating security into DevOps pipelines through application attack surface monitoring. Learn strategies from a recognized expert to enhance your organization's software security practices.
SPArring with the Security of Single Page Applications
Explore security challenges in Single Page Applications with insights on automating detection and mitigation strategies for modern web development vulnerabilities.
InfoSec at Peak Prevention
Explore InfoSec at Peak Prevention with Daniel Miessler, an experienced security tester and consultant. Learn about cutting-edge strategies in application security and IoT security from an industry expert.
The Anatomy of Modern Deceptive Technologies - Closing Keynote
Explore modern deceptive technologies in cybersecurity with expert Chris Roberts. Learn about evolving threat matrices and innovative protection methods for enterprise, industrial, and IoT environments.
Serverless Security: Challenges and Opportunities
Explore serverless architecture's impact on security operations with Twilio experts. Learn about challenges, benefits, and best practices in this emerging paradigm.
Application Security California 2017 - Keynote Address
Explore cutting-edge application security insights and strategies with industry expert Chenxi Wang in this OWASP Foundation presentation from AppSec California 2017.
When Bandit Strikes - Defending Your Python Code
Learn to defend Python code against security threats with insights from experts Will Bengtson and Travis McPeak. Discover proactive strategies and best practices for enhancing your application's security posture.
Life of a Password
Explore the journey of passwords in cybersecurity with LinkedIn's Trust Engineering Director. Learn about authentication challenges and solutions for top websites.
The Road to Free Certificates is Paved with Good Intentions
Exploring the journey towards free SSL/TLS certificates, this talk discusses the challenges, intentions, and implications of widespread HTTPS adoption for web security and privacy.
Threat Modeling for Mobile Applications
Explore threat modeling techniques for mobile applications with expert Amit Sethi. Learn to identify and mitigate security risks in mobile development.
Eliminating Passwords for Enhanced Security - APPSEC CA 2017
Explore password elimination for enhanced security. Learn about device fingerprinting, dynamic mobile authentication, and innovative approaches to secure login without traditional passwords.
Scaling a Software Security Initiative - Lessons from BSIMM
Insights on scaling software security initiatives from BSIMM, covering best practices, challenges, and strategies for implementing robust security measures across large organizations.
Understanding IBM QRadar - Key Components of IBM QRadar
Comprehensive overview of IBM QRadar's key components, functionality, and importance in cybersecurity. Covers threat detection, incident response, and platform capabilities for effective security intelligence.
Error Handling and Security Management in AI Powered Apps - Web Development With AI Episode 7
Learn to handle errors and manage security in AI-powered web apps. Covers bug fixing, input validation, protection against bad actors, and AI-specific attack prevention.
The Evolving Community of Application Security
Explore the evolution of Application Security, its growing importance, and the role of the community in addressing future security challenges at scale.
Webhooks Hookups - Abusing API Developers
Explore the security risks of Webhooks in API development, including potential vulnerabilities, real-world examples, and preventive measures. Learn about a new toolkit for auditing Webhook exposure.
Rhyming with Hacks - The Ballad of Supply Chain Attacks
Explore supply chain attacks, their anatomy, and prevention strategies. Learn about real-life examples, existing solutions, and a new DOM monitoring approach with live demonstration.
Hacking Alexa and Cortana: Vulnerabilities in Voice Assistant Partnerships
Explore innovative "Evil Maid" attacks on Windows, vulnerabilities in Cortana-Alexa integration, and the challenges of merging new concepts with existing security mechanisms. Gain insights into AI and IoT security.
Bypassing Browser Policies and Privacy Extensions for Cookies
Explore bypasses to browser policies and extensions for cookie security. Learn about an automated framework for evaluating countermeasures against cross-site attacks and third-party tracking.