Serverless Security and Functions-as-a-Service (FaaS)
Explore serverless security and Functions-as-a-Service (FaaS) with expert insights on potential risks, best practices, and implementation strategies for robust cloud-native applications.
Fixing Mobile Application Security - OWASP Mobile Security Testing Guide
Introduction to OWASP Mobile Security Testing Guide and Mobile Application Security Verification Standard, addressing challenges in mobile app security testing and best practices for secure development.
Detecting Credential Compromise in AWS
Learn how to detect compromised AWS credentials without prior IP knowledge, crucial for preventing costly data breaches and infrastructure abuse in cloud environments.
Node.js and NPM Ecosystem Security Stakes - Lightning Talk
Explore security initiatives in Node.js and NPM ecosystems, recent security reports, and measures taken to address vulnerabilities in modern software development.
Endpoint Finder: A Static Analysis Tool for Web Endpoint Discovery - Lightning Talk
Discover a static analysis tool for extracting web endpoints from JavaScript files, offering improved accuracy and reduced false positives compared to regex-based methods.
Building Cloud-Native Security for Apps and APIs with NGINX
Enhance NGINX with robust security features for apps and APIs. Learn practical methods for visibility, real-time protection, and mitigation of OWASP Top10 threats, bots, and data leakage in cloud environments.
Clear Site Data Header: Inducing Amnesia in Browsers - AppSecCali 2019
Explore the Clear Site Data HTTP header's security and privacy benefits, its adoption, and implementation strategies for web developers and security teams.
OWASP Juice Shop - Sustainable Development Practices for Web Applications
Explore sustainable web app development with OWASP Juice Shop. Learn clean code, TDD, CI/CD, quality metrics, and mutation testing. Discover automation benefits and overcome challenges in JavaScript development.
Boosting the Security of Angular Applications
Boost Angular 2 app security: Learn about script-based threats, defenses, session management, CSRF, cookie flags, Authorization headers, and JWT tokens. Gain practical knowledge to effectively secure your applications.
Android Password Manager Security Analysis - AppSec EU 2017
Explore Android password manager security, common vulnerabilities, and best practices for protecting stored secrets. Learn about implementation pitfalls and design failures in popular apps.
Attacking JSON - Vulnerabilities in Popular Parsers
Explore JSON parser vulnerabilities in .NET and Java, including RCE risks. Learn about attack techniques, vulnerable formats, and mitigation strategies for safer serialization implementations.
Bot or Not? Mitigating Automated Threats to Web Applications
Explore automated threats to web applications and strategies for mitigating risks in this insightful presentation on cybersecurity challenges and solutions.
Analysis and Detection of Authentication Cross-Site Request Forgery - AppSec EU 2017
Explore seven strategies for detecting Authentication CSRF vulnerabilities, including a semi-automatic tool. Learn from real-world testing results on top websites and their security implications.
Security Best Practices in Azure Cloud
Hands-on overview of implementing security in Azure deployments, covering best practices for various services and secure .NET application deployment.
Fixing Mobile Application Security - The OWASP Mobile Project
Explore OWASP's Mobile Application Verification Standard and Security Testing Guide, addressing key mobile app security challenges and best practices for secure data storage, communication, and API usage.
Security in the Land of Microservices - Challenges and Solutions
Explore security challenges in microservices architecture, including authentication, secret sharing, and API gateway patterns. Learn best practices for securing decoupled services in large-scale applications.
A Case for Integrity: JavaScript Apps Should Have It Too
Explore JavaScript app integrity with Pedro Fortuna, discussing cybersecurity challenges and innovative solutions for protecting client-side code in web applications.
Java LangSec - New Security Controls in Java 8 and 9
Explore new security controls in Java 8 and 9 with expert Jim Manico. Learn about Java LangSec and enhance your secure coding practices for web applications.
A Hybrid Approach for Web Application Penetration Testing
Explore a hybrid approach to web application penetration testing with expert David Caissy, combining manual and automated techniques for comprehensive security assessments.
Needle: Finding Issues within iOS Applications
Discover Needle, an open-source framework for streamlined iOS app security assessments. Learn about its modular architecture, capabilities, and how it simplifies vulnerability detection in iOS applications.
Dynamic Security Group Recommendations with Grouper and Dredge
Explore Netflix's innovative approach to AWS security group management using Grouper and Dredge, enhancing developer insights and ensuring least privilege network access.