DevOops, I Did It Again
Explore security vulnerabilities in DevOps tools and practices, including AWS, Chef, Puppet, and Jenkins. Learn about misconfigurations and potential risks in fast-paced development environments.
Burning Down the Haystack to Find the Needle
Explore network flow pattern analysis to detect and prevent contemporary threats, and learn how to build a security analytics program for enhanced threat visibility and response.
How to Use Adaptive Hashes Without Making Yourself Vulnerable to DoS Attacks
Explore secure adaptive hashing techniques to protect passwords from brute force attacks while preventing DoS vulnerabilities. Learn a proof-of-work solution that balances security and performance in authentication systems.
Security for Non-Unicorns
Strategies for uncovering, preventing, and managing security issues in legacy systems and code for established companies. Practical approaches to improving security beyond startup environments.
iOS Apps Reverse - iPwn Apps
Explore iOS app reverse engineering techniques and tools to uncover hidden information and potential vulnerabilities in AppStore applications.
Mobile AppSec - Development and Alphabet Soup
Explore mobile app security challenges, vulnerabilities, and solutions. Learn effective strategies for protecting data and applications in the rapidly evolving mobile landscape.
The Real Cost of Security
Explore the complexities of security costs with Wendy Nather as she shares research findings, challenges assumptions, and discusses affordability in this thought-provoking LASCON presentation.
User Auth for Winners - How to Get It Right the First Time
Learn best practices for secure user authentication, from account creation to password reset, and implement robust systems to prevent breaches. Gain insights on REST-based platforms, authentication tokens, and scaling strategies.
Stupid Webappsec Tricks
Discover simple yet effective techniques for detecting vulnerabilities and making malicious activity economically infeasible in web application security.
Why CloudHSM Can Revolutionize AWS
Explore CloudHSM's potential to revolutionize AWS security through encryption, automation, and credential management, addressing trust concerns in cloud computing for sensitive data protection.
HTTPS Can Byte Me
Explore HTTPS vulnerabilities and security implications with industry experts, gaining insights into potential risks and mitigation strategies for secure web communication.
How I Met Your Girlfriend
Explore social engineering techniques and privacy vulnerabilities in popular platforms with hacker Samy Kamkar's revealing presentation on digital security risks.
Mitigating Business Risks with Application Security
Explore strategies for mitigating business risks through application security, covering software assurance, supply chain management, and best practices for secure development.
Testing Modern Applications with Hackazon
Learn to test modern web applications using Hackazon, focusing on e-commerce functions, AJAX workflows, and RESTful APIs. Discover hidden vulnerabilities and systematic testing approaches.
The ThreadFix Ecosystem - Vendors, Volunteers, and Versions
Explore ThreadFix: an open-source system for managing app vulnerabilities, automating security tasks, and integrating tools. Learn about its components, ecosystem, and real-world case studies of platform improvements.
Problems You'll Face When Building a Software Security Program
Learn strategies to overcome common challenges in implementing software security programs, including dev process integration, team engagement, and vulnerability management.
Big Data, What's the Big Deal?
Explore big data's value, challenges, and best practices for securing and protecting sensitive information in organizations, with a focus on privacy and security considerations.
Mobile Landscape - The Security of Wearables
Explore the security challenges of wearable devices, including device, application, and network security. Learn about potential threats and considerations for developing secure wearable applications.
The Culture of Security
Explore the crucial role of organizational culture in cybersecurity, sharing real-world experiences and effective strategies to enhance overall security posture beyond just technology.
MQTT and CoAP - A Story about IoT Protocol Security
Explore MQTT and CoAP protocols for IoT, their security challenges, and mitigation strategies. Learn about common architectures, potential attacks, and best practices for secure implementation.
Why Some Multi-Factor Authentication Technology is Irresponsible
Critical assessment of multi-factor authentication technologies, highlighting suboptimal choices and providing guidance for selecting secure solutions. Equips viewers with questions to ask vendors and alternatives to consider.