HTTP3 Security
Explore HTTP3 security with Robin Marx: handshakes, QuickSense, passive proxies, deep packet inspection, and QUIC vs TCP. Gain insights into the latest web protocol advancements.
Insecure Deserialization, and How Not to Do It
Explore secure deserialization techniques and common vulnerabilities with practical demos, focusing on session cookies and big vulnerabilities in various platforms.
The Now and the Future of Malicious WebAssembly
Explore WebAssembly's evolution, performance, and security implications, including its use in cryptojacking and potential future developments in web-based attacks.
OWASP Based Threat Modelling - Creating A Feedback Model in an Agile Environment
Learn to create an effective threat modeling feedback system in Agile environments using OWASP principles. Explore frameworks, processes, and strategies for risk management and application security.
Fast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide
Explore mobile security essentials, including OWASP's Mobile AppSec Verification Standard and Testing Guide. Learn about network communication, data storage, and privacy requirements for robust app protection.
Breaches Are Everywhere - What’s A Good Security Leader To Do?
Explore strategies for security leaders to combat increasing breaches, from IoT vulnerabilities to phishing attacks. Learn essential skills and best practices for effective cybersecurity management.
Securing The Future
Explore the future of cybersecurity with Mikko Hypponen, covering topics like data value, governmental attacks, cyber warfare, and emerging technologies like deepfakes and machine learning for defense.
Restricting the Scripts, You're to Blame, You Give CSP a Bad Name
Explore Content Security Policy's role in web security, covering script restrictions, TLS enforcement, and framing control. Learn best practices and developer insights for effective CSP implementation.
Practical OWASP CRS in High Security Settings
Learn to implement OWASP Core Rule Set for high-security web applications, covering WAFs, ModSecurity, logging, whitelisting, and advanced protection techniques.
OWASP Flagship Projects - OWASP ModSecurity Core Rule Set
Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.
OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation
Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.
OWASP Standard Classification - Rough Consensus - An OWASP Story
Explore OWASP's journey in establishing software security standards through rough consensus, highlighting challenges, achievements, and future directions in the field.
OWASP Standard Classification - Achieving Security by Shifting Left in Agile
Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.
Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack
Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.
Using Binary Search Algorithms for Blind SQL Injection
Explore efficient blind SQL injection techniques using binary search algorithms, enhancing penetration testing skills and applying programming knowledge to real-world security challenges.
All Your Ether Belong to Us - Hacking Ethereum-Based DApps
Explore Ethereum-based DApp vulnerabilities, attack methods, and protection strategies. Learn about blockchain technology, smart contracts, and the security challenges in decentralized applications.
Temporal - The Future Is Simple - Introducing the CRE
Introducing the Common Requirement Enumeration (CRE) initiative: a unified framework linking security standards to simplify and integrate application security across domains and stakeholders.
Topics of Interest - Automatic Vulnerability Remediation - The Trusted and Secure Road to Developer Happiness
Explore automatic vulnerability remediation's potential to expedite product releases, free up development resources, and enhance software security while addressing developer trust concerns.
Topics of Interest - Top 10 Challenges for DevSecOps
Explore the top 10 challenges in implementing DevSecOps, focusing on integrating security into DevOps processes for precise, usable data and reduced business risk.
Temporal - Bot or Human? Detecting Malicious Bots with Machine Learning in 2021
Explore advanced techniques for detecting sophisticated bots using machine learning, combining server-side and client-side signals, and leveraging supervised and unsupervised approaches for maximum accuracy.
Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips
Explore methods and practical tips for attacking microservice systems, focusing on security assessment approaches to identify vulnerabilities specific to this architecture.