PCI DSS and Secure Applications - Best Practices for Compliance
Explore best practices for developing secure applications compliant with PCI DSS requirements. Learn key practices, testing procedures, and evidence needed to meet compliance standards in payment card environments.
Application Security Training Impact on Developer Code Vulnerability
Explores the effectiveness of application security training for developers through a yearlong survey, revealing surprising insights for risk managers and security strategies.
OWASP Hackademic - Teaching Application Security Through Practical Challenges
Practical environment for teaching application security through realistic scenarios with known vulnerabilities. Students discover and exploit vulnerabilities, gaining hands-on experience from an attacker's perspective.
AppSec Training Program Fine-Tuning Based on Survey Data - OWASP AppSecUSA 2014
Explore data-driven insights on AppSec training effectiveness, developer awareness, and learning preferences to optimize security programs and enhance defensive coding practices.
Leveling Up an Application Security Program
David Rook shares insights on enhancing application security at Riot Games, covering assessment, implementation of controls, secure coding guidance, and maintaining a security community in a fast-paced environment.
Building Security Champions - Creating and Sustaining Effective Programs
Learn to build an effective security champions program: recruiting, training, engaging, and motivating champions to scale security efforts across your organization.
OWASP Open Application Security Curriculum
Comprehensive overview of OWASP's initiative to develop an open, standardized application security curriculum for undergraduate and postgraduate education, addressing the skills gap in the security sector.
How to Use Your Vulnerabilities to Train Developers on Security
Learn to leverage your vulnerabilities for targeted developer security training. Discover common coding mistakes, effective fix strategies, and how to create adaptive training plans using real-world examples.
Elite Security Champions: Building a Strong Security Culture in DevSecOps
Explore building an elite Security Champion program for DevSecOps success. Learn essential skills, program elements, and strategies to create a strong security culture and maximize ROI.
Web Application Security: The Secret to Hack-Proof Apps - SQL Injection - Part 2
Discover step-by-step methods to secure web applications from SQL injection threats. Learn to identify vulnerabilities, exploit techniques, and implement effective prevention strategies for robust security.
Purple is the New Black - Modern Approaches to Application Security
Explore modern application security strategies for new technologies, emphasizing the importance of product security in today's cyber landscape and the need for innovative, affordable approaches.
A Glimpse into DevSecOps - Building a Secure NodeJS Service
Explore DevSecOps through building a NodeJS service, focusing on security integration throughout development and deployment. Learn practical insights and best practices for robust, secure software creation.
Securing Applications in SDLC and Cloud-Native Web and API Protection - Sessions 1 and 2
Learn secure coding practices, identify vulnerabilities, and integrate security into SDLC. Explore cloud-native WAAP for effective web app and API protection using machine learning.
Securing Applications in the Software Development Life Cycle (SDLC) - Beginner
Aprenda prácticas de codificación segura para mitigar riesgos de seguridad y proteger datos en el desarrollo de software moderno.
Software Supply Chain Security: Definition and Importance - Episode 1
Explore the key pillars of software supply chain security in this comprehensive podcast episode. Gain insights into problem definition, essential terms, and practical implementation strategies for enhancing your organization's security posture.
Hack the Hustle: Career Strategies for Information Security Professionals
Strategies for advancing your information security career, including resume tips, job search techniques, and professional development advice for cybersecurity professionals.
A Complete Guide to OWASP and Mobile Application Security
Master mobile application security essentials using OWASP standards, from identifying vulnerabilities to implementing secure coding practices and data protection strategies for creating safer mobile applications.
Game of Hacks - The Mother of All Honeypots
Explore real-time hacker adaptations to web app security measures through an interactive honeypot experiment. Learn valuable insights for strengthening enterprise applications against evolving threats.
Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API
Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.
OWASP Top Ten Proactive Controls for Secure Web Development
Learn essential secure coding techniques for web development, covering validation, authentication, access control, encoding, data protection, and secure architecture to build robust and protected applications.
How to Spend $3.6 Million on One Coding Mistake - OWASP BeNeLux Day
Explore infamous data breaches, their technical vulnerabilities, and preventive coding solutions. Learn practical techniques to enhance application security and avoid costly mistakes in your development process.