Building Secure Containers for Mobile Devices
Explore secure container solutions for BYOD environments, covering application wrapping, design challenges, iOS runtime analysis, and implementation best practices for mobile data protection.
Owning the Message Oriented Middleware - Security Analysis and Attacks
Explore enterprise messaging security from JMS API, ActiveMQ vulnerabilities, and JMSDigger tool perspectives. Learn offensive techniques and live demonstrations for assessing messaging applications.
Mantra OS - Penetration Testing Tools and Methodologies
Explore Mantra OS's penetration testing tools for web application security, including DDoS, SQL injection, and man-in-the-middle attacks. Learn practical methodologies and controlled environment testing techniques.
Accidental Abyss: Data Leakage on the Internet
Explore techniques for uncovering personal information scattered across the internet, learn about low-tech reconnaissance methods, and discover tools for effective social engineering and improved security awareness.
Mobile App Analysis with Santoku Linux
Explore mobile app analysis using Santoku Linux, covering forensics, security testing, and malware analysis for Android and iOS platforms. Live demos showcase practical applications of preinstalled tools.
Introduction to the Newest Addition to the OWASP Top 10 - A9 Guidelines
Experts discuss the new OWASP A9 guideline on insecure open source libraries, offering insights on component usage, best practices, and real-world challenges in mitigating risks in agile development.
Application Security - Challenging Traditional Approaches and Controls
Challenging traditional application security approaches, this talk explores innovative strategies for developing and testing secure software, emphasizing the need for consistency and proactive security measures.
AppSec at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time vulnerability detection, enhanced architecture, and proactive collaboration across entire IT portfolios.
Aim-Ready-Fire: Software Assurance and Cybersecurity Panel Discussion
Panel discussion on software assurance trends, challenges, and best practices in cybersecurity. Industry experts share insights on application security, threat intelligence, and risk management strategies for organizations.
Insecure Expectations - Testing for Common Security Issues in Rails Applications
Explore hands-on examples of security testing in Rails, learn about common vulnerabilities, and discover a new open-source tool for simplified security test writing. Gain practical skills to enhance your application's security.
Verifying Software for Security Bugs - Dynamic Analysis and Fuzzing Testing
Learn dynamic analysis and fuzzing techniques to verify software security, including mitigations and vulnerability checks. Explore BinSecSweeper, an open-source tool for binary analysis on Windows and Linux.
PiOSoned POS - A Case Study in iOS-Based Mobile Point-of-Sale Security Flaws
Explore security vulnerabilities in iOS-based mobile point-of-sale systems, including coding mistakes, platform misunderstandings, and hardware weaknesses. Learn best practices for securing mobile POS applications.
Thinking Differently About Security - What Could Possibly Go Wrong?
Explore innovative security perspectives, blending technical expertise with insights from economics and military history to effectively communicate and address cybersecurity challenges.
Cyber's Role in America's Security Arsenal - Offensive and Defensive Strategies
Experts discuss cybersecurity's role in national defense, covering threats, attribution, information sharing, and government responses to protect America's digital infrastructure.
Tagging Your Code with a Useful Assurance Label
Learn to focus software vulnerability assessments on critical weaknesses across the development lifecycle, and create an "assurance tag" for binaries to enhance security efforts.
Wait Wait... Don't Tell Me Software Security - Panel Discussion
Panel discussion testing AppSec knowledge with industry experts through engaging quiz-style segments. Covers current security news, trends, and challenges in an entertaining format.
OWASP Periodic Table of Vulnerabilities
Explore a new approach to web security using the OWASP Periodic Table of Elements, focusing on eliminating vulnerabilities through perimeter technologies and application frameworks.
OWASP Hackademic - Teaching Application Security Through Practical Challenges
Practical environment for teaching application security through realistic scenarios with known vulnerabilities. Students discover and exploit vulnerabilities, gaining hands-on experience from an attacker's perspective.
XML External Entities Attacks - Advanced Exploitation Techniques
Explore advanced techniques for exploiting XML external entities vulnerabilities, including novel approaches for data theft, internal service manipulation, and denial of service attacks.
Use After Free Exploitation - Detecting and Exploiting Heap Vulnerabilities
Explore Use After Free vulnerabilities, their detection, and exploitation in web browsers. Learn about memory leaks and ASLR bypass techniques from an industry expert.
Mobile Security Attacks - A Glimpse from the Trenches
Explore emerging mobile security threats, from physical to network and application levels, with real-world attack examples and insights from experts who uncovered iOS vulnerabilities.