Bug Hunting on the Dark Side
Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.
Compression Bombs Strike Back
Explore data compression risks, HTTP vulnerabilities, and server attack techniques in this comprehensive security analysis of compression-related threats.
IoT Cornerstones of Security
Explore four cornerstones of IoT security, addressing challenges in constrained environments. Learn how to build security from the start, mitigate threats, and implement effective solutions for connected devices.
All Our APIs Are Belong to Us
Explores Snapchat's strategies to protect users from third-party API abuse, detailing server-side and client-side defenses, their effectiveness, and lessons learned in the ongoing security challenge.
Closing the Security Talent Gap
Practical strategies to address the growing security talent gap, including partnerships with academia, promoting security in job roles, and fostering diversity in the field.
Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
Sinking Your Hooks in Applications
Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.
Client-Side Protection Against DOM-Based XSS Done Right
Comprehensive overview of client-side protection against DOM-based XSS attacks, covering vulnerabilities, prevention techniques, and practical solutions for web security professionals.
Windows Phone App Security for Builders and Breakers
Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.
Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life
Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.
Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane
Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.
The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers
Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.
Cloud Security at Scale and What it Means for Your Application
Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.
Application Security Playbook for Business
Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.
Flipping the Script on Application Security
Learn about GitHub's developer-first approach to application security, addressing common DevSecOps challenges and exploring innovative solutions like credential scanning and static analysis.
Temporal - Decoded - Leverage Cybersecurity as a Business Enabler
Discover how to transform cybersecurity from a cost center to a business enabler through strategic auditing, stakeholder engagement, and operational integration.
Struts 2 Must Die - The Life and Inevitable Death of Java’s Spaghettiest Framework
Explore Struts 2's evolution from modern framework to security liability. Dive into OGNL vulnerabilities, architectural flaws, and exploit techniques. Learn why Struts 2 persists in production and its potential for massive damage.
Testing Security the Right Way
Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.
Pentesting Swift Application with OWASP iGoat
Learn iOS Swift app pentesting using OWASP iGoat, covering security loopholes, defense strategies, and real-world case studies. Gain skills for product security engineers and bug bounty hunters.
Knowing Is Half the Battle
Explore key legal and technical aspects of application security, addressing critical issues and lessons learned in this informative talk by Gregory Shapiro.
Creating a Buzz - Tales of Building WordPress Honeypots at Scale
Explore the world of WordPress honeypots, their deployment at scale, and surprising insights into black-hat tactics in this intriguing cybersecurity presentation.