OWASP Open Application Security Curriculum Project
Learn essential application security concepts and practices from OWASP's comprehensive curriculum, designed to enhance your skills in identifying and mitigating software vulnerabilities.
OWASP DSOMM Project - Introduction to DevSecOps Maturity Model
Explore the OWASP DSOMM Project, a framework for enhancing software security practices and measuring DevSecOps maturity in organizations.
OWASP DefectDojo Project
Explore DefectDojo, an open-source vulnerability management tool. Learn its features, implementation, and how it streamlines security testing workflows for development teams.
OWASP Web Honeypot Project
Explore web application security through honeypot technology. Learn deployment strategies, data analysis, and threat intelligence gathering to enhance your cybersecurity defenses.
Helpful Hackers - Keynote by Astrid Oosenbrug
Explore the world of ethical hacking and its positive impact on cybersecurity with insights from Astrid Oosenbrug's keynote address on helpful hackers.
Security Begins with Secure Development Environments
Explore supply chain security threats in development environments, focusing on vulnerabilities in Visual Studio Code extensions and their potential for remote code execution.
Common Application Security Mistakes Enabling Automated Attacks
Explore common security flaws enabling automated attacks on applications, including retail fraud and account takeovers. Learn from real-world examples and discover effective prevention strategies.
How Security, Development, and Testing Can Work Together to Stop Recurring Vulnerabilities - OWASP Top 10
Explore strategies for integrating security, development, and testing to prevent recurring vulnerabilities in the OWASP Top 10, fostering collaboration and cultural change for secure software development.
Building Diversity into Application Security
Explore strategies for fostering diversity in application security with insights from industry experts on inclusive practices and overcoming barriers.
vAPI: Vulnerable Adversely Programmed Interface - OWASP API Top 10
Explore and exploit API vulnerabilities using vAPI, a lab environment mimicking OWASP API Top 10 scenarios. Ideal for developers and penetration testers to understand and address common API security issues.
Post-DevOps: What Should We Shift-Left in Application Security?
Exploring post-DevOps challenges in AppSec, focusing on risk profiles, threat response architecture, and operational aspects to enhance security and quality in fast-paced development environments.
Making the Nation Safer Through Cybersecurity - Gen. Keith Alexander's Insights
Retired Gen. Keith Alexander discusses national cybersecurity strategies, government-industry collaboration, and the evolving landscape of cyber threats in a conversation with Walter Isaacson.
Scaling AppSec through Education
Strategies for scaling application security through developer education, addressing the imbalance between security teams and developers and emphasizing code review for early bug detection.
AppSec Champions Programs - Best Practices and Survey Results
Explore AppSec champions programs: research findings, best practices, and strategies for influencing developers to write secure code. Learn to implement and improve these programs in your organization.
Five Philosophies for Building Better Application Logs
Discover five philosophies for creating application logs that enhance breach readiness and forensic capabilities, empowering developers to build more secure and analyzable systems.
Deep Dive: Privacy and Security - What's the Right Balance?
Exploring the tension between privacy and security in technology, featuring experts discussing encryption, data protection, and balancing civil liberties with law enforcement needs.
What Keeps You Up at Night, General? - National Security Threats and American Leadership
Former CIA director Petraeus and security expert Harman discuss pressing threats to national security, including ISIS, technological advancements, and challenges to American values and leadership on the global stage.
Managing Risk in the Age of Cyberterrorism
Explore evolving cyberterrorism threats and strategies for managing risks to critical infrastructure, personal data, and intellectual property in our interconnected world.
Power Shift: The New Borders and Boundaries of Our Digital World
Explore the digital landscape's unique security challenges, power dynamics, and sociopolitical impacts. Discover how digitization reshapes public power and poses new threats in our interconnected world.
What It Takes to Be Competitive in the 21st Century Economy
Explore digital economy opportunities, workforce challenges, and cybersecurity in the 21st century. Gain insights on government's role, education, and global trade from Commerce Secretary Pritzker.
State of the Nation's Security - A Chat with the Secretary of Homeland Security
Insights on national security from Secretary Jeh Johnson in his final months, discussing current threats, challenges, and strategies for safeguarding the homeland.