Open Source Approaches to Security for Applications and Services - Mozilla Case Study
Explore open-source security approaches for applications and services, covering threat modeling, bug bounties, and measuring security effectiveness in Mozilla's ecosystem.
Building Secure Cloud-Native Applications with Spring Boot and Spring
Learn to build secure cloud-native applications using Spring Boot and Spring, focusing on best practices and techniques for robust, scalable, and protected software development.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
2016 State of Vulnerability Exploits
Explore vulnerability exploits, their trends, and defense strategies in this comprehensive overview of the cybersecurity landscape, featuring insights on exploit kits and prioritization.
Detecting and Managing Bot Activity More Efficiently
Explore efficient bot detection techniques, categorization methods, and response strategies to manage both beneficial and potentially harmful automated web traffic.
Building Your Own Large Scale Web Security Scanning Infrastructure
Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.
Enterprise-wide SSL Automation with Lemur and CloudCA
Explore enterprise-wide SSL automation using Lemur and CloudCA, enabling developers to easily manage SSL certificates and enhance security across applications.
Why Secure Development Programs Are Essential for Application Security
Explore integrating application security into development processes, focusing on proactive measures, resource allocation, and adapting to Agile and DevOps methodologies for effective risk management.
OWASP Security Knowledge Framework - Project Overview and Best Practices
Explore OWASP Security Knowledge Framework with project lead Glenn Ten Cate, discussing goals, milestones, and best coding practices for this essential security tool.
OWASP ZAP - More Advanced Features
Explore advanced features of OWASP ZAP, a powerful open-source web application security testing tool, with insights from Simon Bennetts at AppSecEU 2015 in Amsterdam.
Bringing Security Testing to Development: Enabling Developers as Security Experts
Discover strategies for integrating security testing into development processes, empowering developers to become security experts and enhance application safety.
If 6,000 Mobile Malware Applications Could Talk - Analyzing Malware Behavior and Trends
Explore insights from analyzing 6,000 mobile malware apps, covering distribution, behavior, fingerprinting, and common characteristics. Learn about APK scanning and permission requests.
Abusing JSONP With Rosetta Flash - AppSec EU 2015
Explore JSONP vulnerabilities and the Rosetta Flash exploit technique in this cybersecurity talk, uncovering potential risks and defense strategies for web applications.
The API Assessment Primer
Learn essential API security assessment techniques, including key considerations, testing steps, and best practices for protecting APIs and mobile applications from common vulnerabilities and threats.
Dark Fairytales From A Phisherman - Application Security
Explore phishing techniques and strategies through dark fairytales, offering insights into cybersecurity threats and prevention methods for application security professionals.
Web Service Workers - Breaking the Web: Exploiting a Cool Feature
Explore Web Service Workers' potential to disrupt web security, examining innovative uses and potential vulnerabilities in this cutting-edge browser feature.
50 Shades of Application Security
Explore diverse aspects of application security, from democratization of hacking to user experience and government involvement, in this comprehensive overview by Troy Hunt.
Attracting and Retaining Women in Cybersecurity
Explore strategies for attracting and retaining women in cybersecurity, addressing gender biases, and promoting diversity in the field through education, role models, and inclusive practices.
Calm Down: HTTPS Is Not a VPN
Explore HTTPS limitations, privacy concerns, and security implications in web communications. Learn about packet capture, fingerprinting, and potential vulnerabilities in encrypted connections.
Running a Bug Bounty Program - What You Need to Know
Discover essential insights for running successful bug bounty programs, including strategies, resources, and best practices for effective vulnerability management and rewards.
Scanning with Swagger - Using the Open API Specification to Find Vulnerabilities
Explore leveraging Open API specification for enhanced security scanning, uncovering vulnerabilities and improving application protection strategies.