SUSTO: Systematic Universal Security Testing Orchestration
Explore systematic universal security testing orchestration for efficient vulnerability detection and management in software development lifecycles.
OWASP ESAPI - A Retrospective: The Good, the Bad, and the Ugly
Retrospective on OWASP ESAPI security library, exploring successes, failures, and challenges in developing and maintaining comprehensive web application defenses.
Web Application Honeypot Threat Intelligence - Techniques and Implementation
Explore web application honeypots for threat intelligence, using ModSecurity and OWASP Core Rule Set to capture attacker activity and protect software against emerging threats.
Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps
Discover how OWASP Dependency-Check enabled large-scale Software Composition Analysis on hundreds of vendor-managed apps, addressing software supply chain risks and patch debt in just two months.
Automating IMDS Protection at Scale in AWS - Metabadger Tool Overview
Automate AWS IMDS protection with Metabadger: Learn to upgrade EC2 instances to IMDSv2, prevent SSRF attacks, and secure AWS credentials across multiple accounts without downtime.
Purple Teaming with OWASP PurpleTeam - Security Regression Testing
Explore OWASP PurpleTeam, a security regression testing tool for web apps and APIs. Learn its components, setup, and workflows for early detection of application security defects in build pipelines.
Costly Mistakes in Serverless Computing
Explore common pitfalls in serverless computing and learn how to strengthen your cybersecurity posture when building cloud-based applications.
AWS Misconfiguration from an Attacker's Perspective
Explore AWS misconfigurations from an attacker's perspective with security analyst Kavisha Sheth. Learn to identify and mitigate vulnerabilities in cloud environments for enhanced cybersecurity.
Software Security Engineering: Lessons from the Past to Fix the Future
Explore software security engineering strategies to eliminate known bugs and achieve 99.99% resilience against zero-day threats. Learn from past events to fix future security problems in applications.
OWASP ESAPI - A Retrospective: The Good, the Bad, and the Ugly
Explore the history, successes, and challenges of OWASP ESAPI with Kevin Wall. Gain insights into this security project's evolution and lessons learned.
The History and Future of OWASP - 20 Years in Review
Explore OWASP's 20-year journey, its impact on application security, and future directions. Gain insights into the organization's success factors and vision for the next two decades.
Real World Static Analysis for Real Humans
Explore practical static analysis techniques for software security, focusing on real-world applications and human-centric approaches to code analysis.
Purple Teaming with OWASP PurpleTeam
Explore OWASP PurpleTeam: a security regression testing tool for web apps and APIs. Learn its journey, architecture, benefits, setup, and various workflows for effective implementation in build pipelines.
Automated Serverless Security Testing: Delivering Secure Apps Continuously
Explore serverless security risks, traditional testing limitations, and a new automated approach for secure serverless development without scripts or delays.
OWASP ZAP: Introduction to Web Application Security Testing
Explore OWASP ZAP's latest features, including automation, reporting, and out-of-band testing. Learn how this open-source tool enhances web application security through practical demonstrations and updates.
OWASP Web Security Testing Guide
Comprehensive guide for web security testing, covering methodologies and best practices to identify vulnerabilities and enhance application security.
OWASP Top 10 - Introduction to Web Application Security Risks
Comprehensive overview of OWASP Top 10, exploring critical web application security risks and effective mitigation strategies for developers and security professionals.
OWASP Security Shepherd - Introduction and Overview
Learn to identify and mitigate web application vulnerabilities with OWASP Security Shepherd, an interactive platform for hands-on cybersecurity training and skill development.
OWASP Foundation Opening Remarks
Andrew van der Stock delivers opening remarks, setting the stage for an OWASP Foundation event and highlighting key topics in web application security and open-source collaboration.
OAuth 2.0 and OpenID Connect for Single Page Applications
Explore OAuth 2.0 and OpenID Connect implementation for single-page applications, enhancing security and user authentication in modern web development.
Identifying Assets in the Cloud - Security Techniques
Explore techniques for identifying and securing cloud-based assets, enhancing your organization's cybersecurity posture in the modern digital landscape.