50 Shades of AppSec - Lessons from Diverse Application Security Scenarios
Explore the diverse landscape of application security, from sophisticated to absurd, and learn valuable lessons for future security efforts in this engaging keynote by Troy Hunt.
Cybersecurity Partnership, Technology and Trust - Keynote
Explore DHS's role in cybersecurity, focusing on industry protection, technology advancement, and fostering trust for robust cyber threat information sharing in this keynote by Dr. Phyllis Schneck.
New Methods in Automated XSS Detection - Dynamic Testing Without Static Payloads
Explore innovative dynamic methods for automated XSS detection without static payloads, including techniques for Stored XSS and custom exploit generation. Learn to overcome limitations of traditional approaches.
AppSensor - Real-Time Event Detection and Response for Application Security
Learn about AppSensor, a framework for detecting and responding to malicious behavior in applications. Discover its benefits, features, and implementation strategies for enhanced security intelligence.
Wait, Wait! Don't Pwn Me! - AppSec News Quiz
Interactive security news quiz show featuring industry experts testing knowledge on recent AppSec developments. Engaging format with audience participation and challenges like "Bluff the Listener" and "Security Limerick Challenge".
Modern Malvertising and Malware Web-Based Exploit Campaigns
Explore modern malvertising techniques and web-based exploit campaigns. Learn about top malware types, distribution methods, and obfuscation layers through real-world examples and technical walkthroughs.
The Moral Imperatives and Challenges for Modern Application Security
Alex Stamos discusses evolving application security strategies to protect billions of new internet users, emphasizing safety, real harm prevention, and innovative solutions for a changing digital landscape.
Secure Authentication without the Need for Passwords
Explore behavioral biometrics as a secure, user-friendly alternative to passwords for authentication. Learn how keystroke patterns can provide robust security without compromising usability or privacy.
Putting an "I" in Code Review - Turning Code Reviewing Interactive - AppSecUSA 2016
Interactive code review techniques using debugging for efficient and effective application security testing, combining penetration testing and code review benefits.
Exploiting CORS Misconfigurations for Bitcoins and Bounties
Explore CORS misconfigurations and their exploitation potential, including real-world examples of vulnerabilities in bitcoin exchanges and major websites. Learn about specification flaws and mitigation strategies.
Automating API Penetration Testing Using Fuzzapi
Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.
SPArring with the Security of Single Page Applications - MMA Hacker Training
Explore security challenges in Single Page Applications through an MMA analogy. Learn about SPA frameworks, REST APIs, WebSockets, and interconnectivity to become a "Mixed Multilayer Application Hacker".
AppSec++ - Taking the Best of Agile, DevOps, and CI/CD into Your AppSec Program
Learn to optimize AppSec using Agile, DevOps, and CI/CD principles. Discover strategies for scaling security efforts, leveraging automation, and implementing open-source tools to enhance your application security program.
Barbarians at the Gateway - DDoS and Web Attacks Against Cloud Platforms
Explore DDoS and web attacks on cloud platforms, examining tools, methods, and attacker motivations. Learn to identify patterns for better protection against evolving cyber threats.
How to Find the Next Great Deserialization CVE - AppSecUSA 2016
Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.
Attack Patterns for Black-Box Security Testing - AppSecEU 2016
Explore attack patterns for black-box security testing in web applications, focusing on methodologies and strategies to identify vulnerabilities effectively.
Bugs Ruin Everything - Keynote on Vulnerability Analysis and Exploitation
Explore vulnerability analysis techniques, their strengths and weaknesses, and real-world case studies with security expert Charlie Miller in this engaging keynote from AppSecEU 2016.
Storytelling Techniques for Application Security - Beyond Penetration Testing
Explore interview-based research and consultancy techniques for enhancing application security maturity, fostering security champions, and building quality-minded teams.
From DTD to XXE - An Evaluation of XML Parsers
Comprehensive evaluation of XML parsers, exploring vulnerabilities from DTD to XXE attacks. Gain insights into secure XML parsing and learn to mitigate potential security risks.
AppSec Awareness - A Blueprint for Security Culture Change
Discover strategies for building a sustainable security culture through AppSec awareness, focusing on human factors, knowledge sharing, and effective program architecture.
From Facepalm to Brain Bender - Advanced Web Security Challenges
Explore web security challenges, from basic vulnerabilities to complex exploits, with insights from industry experts on detection, prevention, and mitigation strategies.