The Importance of the Cloud and the Developers Communities in Fighting Cyber Crime
Explore cloud and AI's role in cybersecurity, innovative trends, and Microsoft's strategies to combat evolving cyber threats in this insightful talk by a leading industry expert.
DevSecOps with OWASP DevSlop
Learn DevSecOps through hands-on examples with OWASP DevSlop. Explore secure component management, secret handling, testing techniques, and open-source tools to enhance your pipeline security.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.
Temporal - It's Not Your Developers' Fault
Explore how software development evolution impacts security, from traditional methods to Cloud Native workloads, and why increasing breaches aren't solely developers' responsibility.
Temporal - Code-Origin Policy - Towards a Formal User Privacy Protection for the Web
Explore a novel approach to web privacy protection through code-origin monitoring, offering customizable user safeguards and formal assurance mechanisms for JavaScript execution.
Temporal - Redefining Threat Modeling - Security Team Goes on Vacation
Explore innovative self-serve threat modeling techniques that empower development teams to identify and mitigate security risks independently, enhancing overall application security and efficiency.
Temporal - AppSec Timeline - Wins, Failures, Promises, and Predictions
Explore AppSec's 20-year journey: achievements, setbacks, and future prospects. Analyze trends, evaluate DevSecOps impact, and gain insights into the evolving landscape of application security.
AppSec - From Outsiders to Allies
Chris Wysopal explores AppSec's evolution from hacker-driven to a critical ally in software development, emphasizing the need for collaboration, shared accountability, and integrated security practices in modern development processes.
Extending WAFs at the Application Layer
Explore application-level security control with Sanwaf, an alternative to traditional WAFs. Learn its structure, datatypes, and implementation for enhanced web application protection.
Social Media Botnet Detection with Linkage Analysis and Machine Learning
Explore techniques for detecting social media spam botnets using linkage analysis and machine learning, covering unsupervised and semi-supervised approaches and their applications.
Why Developers Struggle with AppSec
Explore challenges developers face in application security, trust issues, and solutions for integrating security into the development process, with insights on tools and production biases.
Supplier Risk - Where OSS Collides With Vendor Management
Explore the intersection of open source software and vendor management, focusing on supplier risk, regulatory mandates, and strategies for mitigating potential threats in the software supply chain.
Yes, You Too Can Break Crypto - Exploiting Common Crypto Mistakes
Explore common cryptographic vulnerabilities and learn practical techniques to exploit them, enhancing your understanding of secure implementation and potential attack vectors.
Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
Learn how to implement real-time vulnerability alerting using principles from the US Tsunami Warning Center, covering triage methods, data analysis, and prioritization techniques.
OWASP SAMM 2 - Your Dynamic Software Security Journey
Explore OWASP SAMM 2, a dynamic framework for software security. Learn principles, assessment tools, and critical success factors to enhance your organization's security maturity.
OWASP IoTGoat Project Overview and Roadmap
Explore IoTGoat, an OWASP project for IoT security testing. Learn about hardware compatibility, vulnerabilities, and hands-on techniques like firmware extraction and password cracking.
Magecart 2020 - The New Face of XSS
Explore Magecart's evolution, injection techniques, and threat complexity. Learn from real-world case studies and discover strategies to prevent these sophisticated web skimming attacks.
Enabling Message Level Protection at Uber
Explore Uber's approach to message-level protection, including encryption strategies, crypto interfaces, and developer evangelism for secure data handling at scale.
Application Logging in the Era of GDPR
Explore GDPR-compliant application logging practices, data privacy laws, and effective strategies for protecting sensitive information in production logs.
Insider Threat Detection & Automation by Behaviour Analytics
Learn to detect and automate insider threat prevention using behavior analytics, exploring UEBA, anomalies, and data-driven techniques for enhanced cybersecurity.
Before It's Out the Door - Securing Outbound Open Source
Explore strategies for securing open-source projects before release, covering governance, code review, and infrastructure. Learn to address security concerns and manage community projects effectively.