Going Bananas for Cloud Security - Auditing AWS Deployments with Security Monkey
Explore AWS security auditing with security_monkey, a tool for tracking changes, auditing configurations, and understanding interconnectivity across AWS accounts. Learn cloud security best practices and efficient monitoring techniques.
Continuous Cloud Security Automation
Distributed framework for scalable security automation in cloud environments. Easily integrates tools, minimizes false positives, and supports continuous software delivery across teams.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Collective Detection of Harmful Requests
Explore collective detection techniques for identifying harmful web requests, enhancing application security through shared threat intelligence and collaborative defense strategies.
Automated Mobile Application Security Assessment with MobSF - AppSec EU 2016
Discover automated mobile app security assessment using MobSF. Learn techniques for identifying vulnerabilities and enhancing protection in mobile applications.
The Tales of a Bug Bounty Hunter - 10 Interesting Vulnerabilities
Explore 10 fascinating vulnerabilities discovered by a bug bounty hunter, offering insights into real-world security flaws and their implications for web application security.
Using Third-Party Components for Building Secure Software - AppSec EU 2016
Explore secure software development, third-party component risks, and maintenance strategies for effective vulnerability management in enterprise applications.
The ABCs of Source-Assisted Web Application Penetration Testing
Learn advanced web application penetration testing techniques using source code analysis for improved vulnerability detection and assessment.
The Top 10 Web Hacks of 2015
Explore the most impactful web security breaches of 2015, gaining insights into vulnerabilities, attack methods, and essential defensive strategies for safeguarding web applications.
Static Code Analysis of Complex PHP Application Vulnerabilities
Explore advanced static code analysis techniques for detecting complex PHP vulnerabilities, including first-order, second-order, and object injection issues.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Mobile Application Assessments By The Numbers - A Holistic View
Explore mobile app security through data-driven insights, examining vulnerabilities and best practices for comprehensive assessments in this OWASP presentation.
From Zero to Hero - How OWASP Saved My Holiday
Discover how OWASP resources can transform your cybersecurity skills and protect your digital life, as demonstrated through a real-world holiday scenario.
PDF - Mess With The Web
Explore PDF vulnerabilities and their impact on web security in this talk by Alex Infuhr, highlighting potential risks and mitigation strategies for developers and security professionals.
WebRTC Security - How Secure Is P2P Browser Communication?
Explore the security implications of peer-to-peer browser communication through WebRTC, examining potential vulnerabilities and best practices for secure implementation.
So, You Want To Use A WebView? - Security Considerations and Best Practices
Explore WebView security challenges, interfaces, testing methods, and threat models. Learn best practices for implementing secure WebViews in mobile applications.
Security Touchpoints When Acquiring Software
Explore key security considerations and touchpoints in software acquisition, focusing on best practices for ensuring secure integration of third-party solutions.
Security and Insecurity of HTTP Headers
Explore HTTP header security and vulnerabilities with Dirk Wetter. Learn about potential risks and best practices for implementing secure headers in web applications.
Using a JavaScript CDN That Cannot XSS You - With Subresource Integrity
Learn about Subresource Integrity, a security feature that protects against XSS attacks when using JavaScript CDNs, enhancing web application safety.
Server-Side Browsing Considered Harmful
Explore server-side browsing vulnerabilities and their potential risks in web applications. Learn detection techniques and mitigation strategies for improved security.