OWASP A9: Using Components with Known Vulnerabilities - A Year Later
Explore real-world case studies and industry trends on managing component vulnerabilities in applications, with insights on best practices and challenges in following OWASP A9 guidelines.
Dynamic Source-Sink Analysis for Java Applications - From the Ground Up
Dynamic source-sink analysis for Java applications to detect security vulnerabilities, aimed at developers for use during development, not production. Demonstrates live detection of issues like log manipulation.
Stop Chasing Vulnerabilities - Introducing Continuous Application Security
Explore continuous application security strategies using open-source tools for real-time monitoring and analytics, shifting focus from individual vulnerabilities to comprehensive portfolio-wide assurance.
Threat Modeling Made Interactive - Using Poirot for Dynamic Security Analysis
Interactive demonstration of Poirot, a tool for modeling and analyzing system security during design phase, enabling real-time threat assessment and mitigation strategies.
Hacking .NET Applications - The Black Arts of ASM Attacks
Explore new tools and techniques for attacking .NET applications in live memory, enabling easy point-and-click attacks on critical software components with basic skills and free tools.
Client-Side Exploitation Techniques Without Zero-Day Vulnerabilities
Explore practical client-side exploitation techniques without 0days, including browser extensions, HTML applications, and UI manipulation. Learn to automate attacks and tailor them for effective offensive security.
Password Complexity Requirements are Worthless - Effective Password Security Strategies
Debunking password security myths and demonstrating effective methods for creating strong passwords. Explores real-world examples, critiques current practices, and introduces a new open-source tool for better password protection.
Blended Web and Database Attacks on Real-time, In-Memory Platforms
Explore blended web and database attacks on real-time, in-memory platforms, focusing on SAP HANA. Learn about novel exploit techniques, vulnerabilities, and security considerations for these high-performance systems.
Improved Phishing Detection Using Perceptual Hashing - AppSecUSA 2014
Explore advanced phishing detection using perceptual hashing algorithms, with insights on identifying malicious sites masquerading as popular platforms and a demonstration of new defensive tools.
Anatomy of Memory Scraping Credit Card Stealing POS Malware
Explore memory scraping techniques in POS malware, understand their inner workings, and learn effective strategies to protect against credit card data theft in this comprehensive analysis.
IEEE Computer Society's Center for Secure Design - Helping Design More Secure Software
Explore common software design flaws and learn strategies to create more secure applications with insights from the IEEE Computer Society's Center for Secure Design workshop.
11,000 Voices - Experts Shed Light on 4-Year Open Source and AppSec Survey
Experts discuss findings from a 4-year study on open source security practices, revealing surprising trends in policy enforcement, vulnerability tracking, and organizational preparedness for security threats like Heartbleed.
Lean Security for Small or Medium-Sized Businesses
Introduces a framework for SMBs to focus security efforts, discussing prevention, limitation, detection, and response capabilities. Provides cost-effective techniques to transform security into a business enabler.
AppSec Training Program Fine-Tuning Based on Survey Data - OWASP AppSecUSA 2014
Explore data-driven insights on AppSec training effectiveness, developer awareness, and learning preferences to optimize security programs and enhance defensive coding practices.
Building Your Application Security Data Hub - The Imperative for Structured Vulnerability Information
Learn how to create an integrated application security program by breaking down silos, enabling data flow between teams and tools, and implementing metrics to measure performance and improvement.
AppSecUSA 2014 Builders Track - Friday Sessions
Explore key AppSec topics: mobile security, threat modeling, continuous security, and component vulnerabilities. Gain insights from industry experts to enhance your application security practices.
BSIMM: A Decade of Software Security Evolution - Keynote
Explore the evolution of software security over a decade, from early concepts to modern practices, highlighting the BSIMM framework for measuring and improving security initiatives in software development.
OWASP AppSecUSA 2014 - Defenders Track Sessions
Explore cutting-edge cybersecurity topics including secure software design, memory scraping malware, cloud security, phishing detection, and attacks on in-memory platforms in this OWASP AppSecUSA conference.
Application Security Management Strategies - OWASP AppSecUSA 2014
Explore key AppSec topics: structured vulnerability data, training programs, open source surveys, lean security for SMBs, and adaptive strategies. Gain insights from industry experts at OWASP's AppSecUSA 2014.
AppSecUSA 2014 - Breakers Track Sessions
Explore cutting-edge web and mobile security topics, including mobile attacks, use-after-free exploitation, static analysis, runtime manipulation, and top hacking techniques from AppSecUSA 2014.
The Future of Incident Response - Network Security Challenges
Bruce Schneier explores the future of incident response in cybersecurity, emphasizing the need for human-centric approaches and systems theory to effectively combat inevitable network attacks.