Inclusive Design and Testing - Making Your App More Accessible
Learn to create inclusive apps for users with disabilities through design guidelines and automated testing tools. Gain insights from real user experiences to enhance accessibility and expand your user base.
Building Thoughtful Robotics - Addressing Racial Biases and Inequities
Leaders of "Black in Robotics" advocate for addressing racial biases in robotics development, emphasizing diversity in creators and thoughtful consideration of potential impacts on all groups before deploying new technologies.
Leonardo da Vinci: The Man Behind the Myths
Explore Leonardo da Vinci's life, works, and genius through expert insights, debunking myths and revealing the fascinating reality behind the Renaissance polymath.
Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage
Explore API security risks, comparing OWASP's API and Application Top 10 lists. Learn detection and prevention strategies for vulnerabilities in web services, APIs, and GraphQL.
Magecart - The Rising Threat to E-commerce Websites
Explore Magecart, a cybercrime group targeting e-commerce sites through digital skimming. Learn about their tactics, technical aspects, and mitigation strategies for protecting user data.
Security Design Anti-Patterns: Creating Awareness to Limit Security Debt
Explore security design anti-patterns, their impact on SDLC, and strategies to identify and mitigate them early. Learn to create awareness and limit security debt in software development.
Data-Driven AppSec Champions Programs - Benchmarking Your Program with Numbers
Insights from a survey of 26 innovative AppSec champions programs, covering best practices in recruitment, training, communication, and ROI measurement to enhance software security.
Building Security Champions - Creating and Sustaining Effective Programs
Learn to build an effective security champions program: recruiting, training, engaging, and motivating champions to scale security efforts across your organization.
Bots Gone Phishing - Defending Against Automated Attacks and Phishing
Explore techniques to defend against phishing bots using obfuscation and one-time tokens, increasing costs for attackers while protecting web applications and APIs from automated threats.
Roadblocks for Content Security Policy (CSP) Implementation - Developer Challenges and Solutions
Explore challenges in implementing Content Security Policy (CSP) for web security, including complexity, legacy code, and browser support. Learn strategies to overcome obstacles and enhance CSP deployment.
OWASP Leaders Meeting - Updates and Collaboration
Learn about OWASP's latest updates, share experiences, and discuss strategies to advance web application security. Connect with leaders across projects, chapters, events, and committees.
OWASP Open Application Security Curriculum
Comprehensive overview of OWASP's initiative to develop an open, standardized application security curriculum for undergraduate and postgraduate education, addressing the skills gap in the security sector.
Ending Injection Vulnerabilities
Learn how programming languages can prevent injection vulnerabilities by distinguishing trusted developer strings from potentially attacker-controlled input, ensuring safer handling of user values in sensitive contexts.
Securing Modern Applications and APIs Against Attacks
Explore effective API security strategies for modern applications, focusing on deep application knowledge and user behavior to protect against evolving threats in cloud-native architectures.
How to Use Your Vulnerabilities to Train Developers on Security
Learn to leverage your vulnerabilities for targeted developer security training. Discover common coding mistakes, effective fix strategies, and how to create adaptive training plans using real-world examples.
OWASP ZAP and DeepFactor - Continuous AppSec Observability for DevSecOps
Explore how DeepFactor's observability enhances OWASP ZAP for comprehensive DevSecOps, detecting security risks in modern cloud-native applications through advanced event monitoring.
Are You Safe from OWASP #11? - Creating a Successful API Security Program
Explore API security beyond Top 10 lists, focusing on building a comprehensive program at scale. Learn key strategies for successful API protection and management.
Why Security Fails and How to Solve It - Lessons from Real-World Assessments
Explore real-world security failures and innovative solutions with insights from Praetorian's field experiences. Learn actionable steps to enhance cybersecurity through smarter practices and cutting-edge tools.
SecDevOps - Integrating Security into Development and Operations
Explore SecDevOps: integrating security into CI/CD pipelines, securing development environments, and implementing security as code for robust cybersecurity from the start.
Securing the Future: Challenges and Innovations in Application Security
Insightful keynote address exploring cutting-edge application security trends, challenges, and best practices in the rapidly evolving digital landscape.
Application Security Best Practices - 2022 Global AppSec Keynote
Explore cutting-edge application security insights and strategies with industry expert Jim Manico in this thought-provoking keynote address from the 2022 Global AppSec conference.