PCI DSS and Secure Applications - Best Practices for Compliance
Explore best practices for developing secure applications compliant with PCI DSS requirements. Learn key practices, testing procedures, and evidence needed to meet compliance standards in payment card environments.
Application Security Training Impact on Developer Code Vulnerability
Explores the effectiveness of application security training for developers through a yearlong survey, revealing surprising insights for risk managers and security strategies.
Security Implications of Cross-Origin Resource Sharing - HTML5 and CORS Analysis
Explore security implications of Cross-Origin Resource Sharing in HTML5, including its impact on same-origin policy, potential vulnerabilities, and mitigation strategies for web application developers.
Hybrid Analysis Mapping - Making Security and Development Tools Play Nice Together
Explore techniques for integrating security testing and development tools, improving collaboration between testers and developers for more effective application security and code quality.
OWASP Mobile Top Ten 2014 - The New Lack of Binary Protection Category
Explore the new OWASP Mobile Top Ten category: lack of binary protections. Learn about risks to mobile apps, their impact on the app economy, and strategies to mitigate these threats on iOS and Android platforms.
Getting a Handle on Mobile Security
Comprehensive overview of mobile security challenges and best practices, covering encryption, data protection, and platform-specific concerns for developers building secure mobile applications.
OWASP AppSec Europe 2014 - Builder and Breaker Track Sessions
Explore cutting-edge web security topics including DevOps, JavaScript vulnerabilities, XSS detection, Windows Store app testing, developer training effectiveness, and automated authorization checks.
Malware and Defense Techniques - OWASP AppSec Europe 2014
Explore cutting-edge malware detection, web security, and network defense techniques from industry experts at OWASP AppSec Europe 2014. Gain insights on cloud-based solutions, botnet detection, and advanced web application protection.
Mobile Security Track - AppSec Europe 2014
Explore cutting-edge mobile security topics at AppSecEU 2014, covering iOS and Android vulnerabilities, OWASP Mobile Top Ten, smart storage scanning, and practical defense strategies for app developers.
OWASP Reverse Engineering and Code Modification Prevention Project
Explore reverse engineering risks and prevention techniques for application security experts. Learn about code integrity, data validation, and architectural principles to protect software in untrusted environments.
Keynote on Web Application Security
Insightful keynote address exploring cutting-edge cybersecurity trends, challenges, and strategies in the rapidly evolving digital landscape.
Building Secure Containers for Mobile Devices
Explore secure container solutions for BYOD environments, covering application wrapping, design challenges, iOS runtime analysis, and implementation best practices for mobile data protection.
Mobile App Analysis with Santoku Linux
Explore mobile app analysis using Santoku Linux, covering forensics, security testing, and malware analysis for Android and iOS platforms. Live demos showcase practical applications of preinstalled tools.
AppSec at DevOps Speed and Portfolio Scale
Explore a revolutionary approach to application security using passive sensors for real-time vulnerability detection, enhanced architecture, and proactive collaboration across entire IT portfolios.
Insecure Expectations - Testing for Common Security Issues in Rails Applications
Explore hands-on examples of security testing in Rails, learn about common vulnerabilities, and discover a new open-source tool for simplified security test writing. Gain practical skills to enhance your application's security.
Verifying Software for Security Bugs - Dynamic Analysis and Fuzzing Testing
Learn dynamic analysis and fuzzing techniques to verify software security, including mitigations and vulnerability checks. Explore BinSecSweeper, an open-source tool for binary analysis on Windows and Linux.
PiOSoned POS - A Case Study in iOS-Based Mobile Point-of-Sale Security Flaws
Explore security vulnerabilities in iOS-based mobile point-of-sale systems, including coding mistakes, platform misunderstandings, and hardware weaknesses. Learn best practices for securing mobile POS applications.
OWASP Hackademic - Teaching Application Security Through Practical Challenges
Practical environment for teaching application security through realistic scenarios with known vulnerabilities. Students discover and exploit vulnerabilities, gaining hands-on experience from an attacker's perspective.
XML External Entities Attacks - Advanced Exploitation Techniques
Explore advanced techniques for exploiting XML external entities vulnerabilities, including novel approaches for data theft, internal service manipulation, and denial of service attacks.
Mobile Security Attacks - A Glimpse from the Trenches
Explore emerging mobile security threats, from physical to network and application levels, with real-world attack examples and insights from experts who uncovered iOS vulnerabilities.
OWASP A9: Using Components with Known Vulnerabilities - A Year Later
Explore real-world case studies and industry trends on managing component vulnerabilities in applications, with insights on best practices and challenges in following OWASP A9 guidelines.