How to Slay a Dragon - A Three-Step Strategy for Solving Complex Security Problems
Discover a three-step strategy for tackling complex security challenges in Chrome, focusing on incremental progress, accepting imperfections, and considering long-term costs.
Weaknesses in Voice Communications Networks
Explore vulnerabilities in voice communication networks and learn about potential security risks and mitigation strategies for telecom infrastructure.
Lessons From The Legion - OWASP BeNeLux Day 2018
Explore cybersecurity insights from the French Foreign Legion, applying military strategies to digital defense. Gain unique perspectives on threat mitigation and organizational resilience.
Teaching Sustainable Security in DevOps and Agile Environments - AppSecUSA 2018
Strategies for sustainable security in DevOps teams: assessment, training, coaching, automation, and risk management. Avoid common pitfalls and empower teams for long-term security success.
Creating an AppSec Pipeline with Containers in a Week
Explore the journey of setting up an AppSec pipeline using Docker containers, addressing challenges, managing false positives, and optimizing security tools for seamless integration with development teams.
The Evil Friend in Your Browser - Browser Extension Security Risks
Explore the hidden dangers of browser extensions, their security model limitations, and potential risks to user privacy. Learn about real-world analysis findings and discuss improved security measures.
Embedding GDPR into the Software Development Lifecycle
Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, threat modeling, and breach notification processes.
Juggling the Elephants - Making AppSec a Continuous Program
Strategies for implementing a continuous AppSec program that integrates security initiatives, enables DevOps, and addresses portfolio-wide coverage while prioritizing risks and fostering continuous improvement.
Remediating XSS in GitHub Open Source Projects - Lessons Learned
Insights on scaling XSS remediation across GitHub open source projects, focusing on risk reduction, adding security controls, and automating code modification for diverse applications.
A Pragmatic Approach for Internal Security Partnerships
Strategies for effective security partnerships with engineering teams, focusing on shared risk views, automation, and integrating security into product roadmaps.
Managing Vulnerability Response Dependencies in Third-Party Components - AppSecCali 2019
Explore a framework for managing dependencies in vulnerability response, enabling proactive PSIRT strategies and improving product security through early-stage decision-making and controls.
Baking Security Into the Software Development Lifecycle - CISO Panel
CISOs discuss strategies for integrating security into rapid application development, sharing real-world experiences on managing evolving methodologies and pressures to publish securely.
DevSecOps Roundup - An Overview of the Current State
Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.
Open Source Dependencies: Risks and Impacts - AppSec EU 2017
Explore the risks of open-source dependencies in software development, including potential impacts of code removal or malicious modifications on major organizations and applications.
Threat Modeling with PASTA - Application Security Case Studies
Explore risk-centric threat modeling using PASTA methodology, with case studies in IoT, E-Commerce, and Mobile Applications. Learn to align design and coding techniques with application use cases and potential threats.
Strategic Defense in Cybersecurity - OWASP AppSec CA 2017
Explore strategic defense in cybersecurity with insights from Kevin Cardwell, an expert consultant with extensive experience in banking, financial institutions, and government red team operations.
When Bandit Strikes - Defending Your Python Code
Learn to defend Python code against security threats with insights from experts Will Bengtson and Travis McPeak. Discover proactive strategies and best practices for enhancing your application's security posture.
Virtual AppSec Days Lightning Conference
Explore cutting-edge application security topics with industry experts in this fast-paced, informative conference session from OWASP Foundation.
Scaling Security through Context-Based Security Assessments
Streamlining security assessments through context-based automation, enabling efficient scaling and tailored workflows for product security teams in rapidly growing organizations.
SBOM SmackDown - Conquering Software Supply Chain Risks with OWASP CycloneDX
Explore Software Bill of Materials (SBOM) and learn how OWASP CycloneDX standard enhances software supply chain transparency, enabling better risk-based decisions and compliance with government mandates.
Practical Threat Modeling for Real-World and Cloud Situations in Hybrid Work Environments
Practical guide to threat modeling for cloud and hybrid work environments, covering creation, identification, addressing, and validation of threats with real-world examples and tools.