Design Approaches for Security Automation
Explore criteria for designing and evaluating security automation tools, including build vs. buy decisions, deployment strategies, and effective implementation for organizational needs.
ClickOnce Exploitation: One-Click Network Foothold - AppSec California 2016
Explore ClickOnce deployment vulnerabilities and learn a new methodology for establishing network footholds through minimal user interaction and phishing techniques.
Preventing Security Bugs through Software Design
Learn strategies to prevent security vulnerabilities through API and framework design, focusing on SQL injection and XSS prevention techniques used successfully at Google.
Taking AppSec to 11: Pipelines, DevOps and Making Things Better
Scaling AppSec through DevOps: Learn strategies to enhance application security programs using pipelines, automation, and iterative improvements for large-scale organizations.
Software Security Initiative Capabilities - Where to Begin
Explore key capabilities for starting a software security initiative, including penetration testing, code review, and secure design review. Learn benefits, drawbacks, and integration into mature security practices.
New Methods in Automated XSS Detection - Dynamic Testing Without Static Payloads
Explore innovative dynamic methods for automated XSS detection without static payloads, including techniques for Stored XSS and custom exploit generation. Learn to overcome limitations of traditional approaches.
AppSensor - Real-Time Event Detection and Response for Application Security
Learn about AppSensor, a framework for detecting and responding to malicious behavior in applications. Discover its benefits, features, and implementation strategies for enhanced security intelligence.
Wait, Wait! Don't Pwn Me! - AppSec News Quiz
Interactive security news quiz show featuring industry experts testing knowledge on recent AppSec developments. Engaging format with audience participation and challenges like "Bluff the Listener" and "Security Limerick Challenge".
Modern Malvertising and Malware Web-Based Exploit Campaigns
Explore modern malvertising techniques and web-based exploit campaigns. Learn about top malware types, distribution methods, and obfuscation layers through real-world examples and technical walkthroughs.
Putting an "I" in Code Review - Turning Code Reviewing Interactive - AppSecUSA 2016
Interactive code review techniques using debugging for efficient and effective application security testing, combining penetration testing and code review benefits.
Automating API Penetration Testing Using Fuzzapi
Explore automated API penetration testing with fuzzapi, addressing common vulnerabilities in REST APIs. Learn to integrate security testing into development pipelines for early detection and mitigation.
SPArring with the Security of Single Page Applications - MMA Hacker Training
Explore security challenges in Single Page Applications through an MMA analogy. Learn about SPA frameworks, REST APIs, WebSockets, and interconnectivity to become a "Mixed Multilayer Application Hacker".
Barbarians at the Gateway - DDoS and Web Attacks Against Cloud Platforms
Explore DDoS and web attacks on cloud platforms, examining tools, methods, and attacker motivations. Learn to identify patterns for better protection against evolving cyber threats.
Attack Patterns for Black-Box Security Testing - AppSecEU 2016
Explore attack patterns for black-box security testing in web applications, focusing on methodologies and strategies to identify vulnerabilities effectively.
Bugs Ruin Everything - Keynote on Vulnerability Analysis and Exploitation
Explore vulnerability analysis techniques, their strengths and weaknesses, and real-world case studies with security expert Charlie Miller in this engaging keynote from AppSecEU 2016.
Building Secure Cloud-Native Applications with Spring Boot and Spring
Learn to build secure cloud-native applications using Spring Boot and Spring, focusing on best practices and techniques for robust, scalable, and protected software development.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
Detecting and Managing Bot Activity More Efficiently
Explore efficient bot detection techniques, categorization methods, and response strategies to manage both beneficial and potentially harmful automated web traffic.
Building Your Own Large Scale Web Security Scanning Infrastructure
Learn to build, scale, and integrate a robust web security scanning infrastructure into your continuous delivery pipeline, with insights on customization and comparisons to existing solutions.
Enterprise-wide SSL Automation with Lemur and CloudCA
Explore enterprise-wide SSL automation using Lemur and CloudCA, enabling developers to easily manage SSL certificates and enhance security across applications.
Why Secure Development Programs Are Essential for Application Security
Explore integrating application security into development processes, focusing on proactive measures, resource allocation, and adapting to Agile and DevOps methodologies for effective risk management.