Six Key Metrics - A Look at the Future of AppSec
Explore six crucial metrics shaping the future of application security. Gain insights into emerging trends and strategies for enhancing your organization's AppSec practices.
Application Security Debt and Application Interest Rates
Explore application security debt and interest rates with Chris Wysopal from Veracode. Learn strategies to manage and mitigate security risks in software development.
Next Gen Web Attacks - HTML 5, DOM L3 and XHR L2
Explore cutting-edge web security threats and defense strategies focusing on HTML5, DOM Level 3, and XMLHttpRequest Level 2 technologies with expert Shreeraj Shah.
Emerging Threats in Mobile Computing
Explore emerging threats in mobile computing, covering device security, data protection, attack surfaces, and interception techniques. Learn about risks and mitigation strategies for smartphones and cellular networks.
Enterprise Security API ESAPI 2.0 Crypto Changes
Explore ESAPI 2.0's cryptographic enhancements and the OWASP Project Portal, featuring insights from security experts Kevin Wall and Jason Li.
Community - The Killer App
Explore the power of community in application security with Mark Curphey's insights on OWASP's collaborative approach to addressing cybersecurity challenges.
Threat Modeling for Linux Containers LXC, Docker and the Cloud
Explore threat modeling for complex cloud systems, focusing on Linux containers and OpenStack. Learn innovative approaches beyond traditional data flow diagrams for effective security analysis.
Seven Grades of Perfect Forward Secrecy
Explore Perfect Forward Secrecy adoption levels across industries, understand its importance post-Heartbleed, and learn how to assess PFS maturity in your organization.
Warning Ahead - Security Storms are Brewing in Your JavaScript
Explore JavaScript vulnerabilities, including unique issues, third-party platform exploits, and HTML5 security concerns. Learn about emerging threats and their impact on enterprise security.
Welcome to the Blue Team - How Building a Better Hacker Accidentally Built a Better Defender
Explore how bug bounty programs revolutionize cybersecurity by leveraging crowdsourced expertise, accelerating vulnerability detection, and fostering a security-aware culture in product development teams.
Runtime Manipulation of Android and iOS Applications
Explore runtime analysis and manipulation techniques for mobile app security testing, focusing on tools for iOS and Android to enhance your mobile security toolbox.
Security from Inception
Explore strategies for integrating security into application projects, focusing on trade-offs, priorities, and communication between developers and security teams.
Privacy - Re-framing What We Think We Know
Exploring privacy's evolving nature, challenging preconceptions, and emphasizing its importance in digital security. Discusses Tor, cyberstalking, and the need for responsible digital citizenship.
The CISO's Dilemma
Explore the challenges faced by Chief Information Security Officers and strategies for effective cybersecurity leadership in today's complex threat landscape.
Office Equipment - The Front Door To Persistence On Enterprise Networks
Explore vulnerabilities in office equipment and their potential for network persistence, uncovering risks and mitigation strategies for enterprise security.
The Frugal Girl’s Guide to Threat Intelligence
Learn cost-effective threat intelligence strategies to enhance your organization's security posture. Discover open-source tools, free resources, and integration techniques for incident prevention and response.
Chopping Down Mountains
Exploring undisclosed security risks in digital currency exchanges and their potential impact on cryptocurrencies, with practical solutions for addressing these vulnerabilities.
Security Analytics Beyond Cyber
Explore big data and data science in cybersecurity analytics, covering use cases, architecture, and skills. Learn to implement proof of concepts and extend capabilities for data-driven security management.
Pentesting NoSQL DB's Using NoSQL Exploitation Framework
Explore NoSQL database vulnerabilities and exploitation techniques for MongoDB, CouchDB, and Redis using the NoSQL Exploitation Framework. Learn about injection attacks, security issues, and automated penetration testing methods.
I Hunt TR-069 Admins - Pwning ISPs Like a Boss
Exploring TR-069/CWMP vulnerabilities in residential gateways and ACS software, demonstrating potential for mass exploitation of consumer devices through ISP management systems.
When Documents Bite
Explore malicious document attacks, their evolution, and impact on cybersecurity. Learn about real-world techniques and strategies for defending against targeted attacks in enterprise networks.