11,000 Voices - Experts Shed Light on 4-Year Open Source and AppSec Survey
Experts discuss findings from a 4-year study on open source security practices, revealing surprising trends in policy enforcement, vulnerability tracking, and organizational preparedness for security threats like Heartbleed.
OWASP Top 10 Mobile Risks: 2014 Reboot
Explore the updated 2014 OWASP Top 10 Mobile Risks, comparing changes since 2011, understanding new threats, and learning recommended fixes for iOS, Android, and Windows Phone platforms.
Content Security Policy (CSP) - Understanding and Implementing Web Protection
Learn about Content Security Policy (CSP), a powerful browser security feature that mitigates cross-site scripting attacks. Discover its benefits, implementation strategies, and future impact on web security.
Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage
Explore API security risks, comparing OWASP's API and Application Top 10 lists. Learn detection and prevention strategies for vulnerabilities in web services, APIs, and GraphQL.
A New Architecture for Data Security to Free Incident Responders from False Positives
Explore a new data security architecture that minimizes false positives, enhancing incident response efficiency and improving detection of real security threats.
OWASP Top 10 Security Risks for Large Language Models
Explore OWASP Top 10 LLM security risks, learn mitigation strategies, and understand the impact of Generative AI on cybersecurity in various industries.
Securing Applications in SDLC and Cloud-Native Web and API Protection - Sessions 1 and 2
Learn secure coding practices, identify vulnerabilities, and integrate security into SDLC. Explore cloud-native WAAP for effective web app and API protection using machine learning.
OWASP LLM Top 10 - Understanding Critical Security Risks for Large Language Models
Explore OWASP LLM Top 10: Gain insights into critical security risks, learn practical steps to fortify applications, and stay ahead in cybersecurity with expert R Nagarjun.
What's Not So New in the New OWASP Top 10 - Devoxx Poland 2022
Explore OWASP Top 10 updates, focusing on insecure design. Learn defense-in-depth strategies, secure design principles, and threat modeling methodologies like STRIDE for improved web application security.
OWASP Top 10 Training - Part 4
Comprehensive exploration of OWASP Top 10 security vulnerabilities, offering insights and strategies for web application protection and risk mitigation.
OWASP Top 10 - Security Vulnerabilities A8 to A10 - 2017 Edition
Explore OWASP Top 10 vulnerabilities A8 to A10, focusing on insecure deserialization, using components with known vulnerabilities, and insufficient logging and monitoring.
OWASP Top 10 2017 - Security Vulnerabilities A4 to A8 - Part 3 of 5
Explore OWASP Top 10 vulnerabilities A4 to A8, gaining insights into critical web application security risks and effective mitigation strategies.
OWASP Top 10 - Vulnerabilities A2 to A4 - Part 2 of 5
Explore critical web application security risks A2-A4 from the OWASP Top 10, focusing on broken authentication, sensitive data exposure, and XML external entities.
OWASP Top 10 Security Risks - Part 1 of 5
Comprehensive overview of OWASP Top 10 security vulnerabilities, focusing on injection flaws and broken authentication. Learn to identify and mitigate critical web application risks.
Building Cloud-Native Security for Apps and APIs with NGINX
Enhance NGINX with robust security features for apps and APIs. Learn practical methods for visibility, real-time protection, and mitigation of OWASP Top10 threats, bots, and data leakage in cloud environments.
Black-Box Approximate Taint Tracking by Utilizing Data Partitioning
Innovative black-box taint tracking system for detecting user input data injection in commands and SQL queries, offering cost-effective and performant runtime protection without code modifications.
Stealth Authentication: Preventing Information Leaks in Web Application Security - APPSEC CA 2017
Explore stealth authentication techniques to enhance web application security by preventing information leaks during the authentication process.
OWASP Top 10 - Introduction to Web Application Security Risks
Comprehensive overview of OWASP Top 10, exploring critical web application security risks and effective mitigation strategies for developers and security professionals.
Hack.me: A New Way to Learn Web Application Security
Explore a free, browser-based platform for practicing offensive techniques on vulnerable web applications. Learn about OWASP Top 10, CMS vulnerabilities, and latest exploits in a sandboxed environment.
RailsGoat: Vulnerable Ruby on Rails Framework for Security Education
Explore RailsGoat, a vulnerable Ruby on Rails app designed to educate developers and security professionals on OWASP Top 10 vulnerabilities and additional security issues.
The 2013 OWASP Top 10 - Understanding Web Application Security Risks
Comprehensive overview of OWASP Top 10 2013, covering changes, risks, and mitigation strategies for web application security. Essential for developers and security professionals.