OWASP Top 10 Maturity Categories for Security Champions
Learn to become an effective Security Champion using OWASP's Top 10 Maturity Categories. Explore key responsibilities, maturity models, and strategies for improving organizational security posture.
Blinded by the Weakest Link - A New Perspective on Human Risk in Cybersecurity
Explore a new perspective on human risk in cybersecurity, challenging the "weakest link" mindset and offering innovative strategies to enhance security decision-making and behavior.
Scaling AppSec through Education
Strategies for scaling application security through developer education, addressing the imbalance between security teams and developers and emphasizing code review for early bug detection.
Security Culture Hacking - Disrupting the Security Status Quo
Explore security culture hacking techniques to disrupt the status quo and create positive change. Learn strategies for awareness, learning, and community building to improve organizational security from within.
Building a Security Culture - Digital Transformation and Breach Prevention
Explore strategies for creating a robust security culture amid digital transformation, addressing cloud risks, BYOD challenges, and persistent breaches despite technological investments.
50 Shades of AppSec - Lessons from Diverse Application Security Scenarios
Explore the diverse landscape of application security, from sophisticated to absurd, and learn valuable lessons for future security efforts in this engaging keynote by Troy Hunt.
AppSec Awareness - A Blueprint for Security Culture Change
Discover strategies for building a sustainable security culture through AppSec awareness, focusing on human factors, knowledge sharing, and effective program architecture.
Building a Better Hacker to Improve Cybersecurity Defense
Explore how understanding hacker mentality bridges the gap between developers and security teams, leading to more effective cybersecurity strategies and proactive threat prevention.
Copy Pest - A Case Study on the Clipboard, Blind Trust, and Invisible Cross-Application XSS
Explore clipboard vulnerabilities and cross-application XSS in this case study on invisible security threats and blind trust in web applications.
AppSec EU 2014 - Chapter Leaders Workshop
Collaborative workshop for OWASP chapter leaders, focusing on strategies, best practices, and networking to enhance local cybersecurity communities and initiatives.
Can AppSec Training Really Make Developers Security-Smart?
Explore the effectiveness of AppSec training for developers through a year-long survey, revealing surprising insights on knowledge retention and practical application in software security programs.
The Cavalry Is Us - Cybersecurity Activism in the Internet of Things Era
Exploring cybersecurity challenges in IoT and the need for collective action. Calls for researchers and professionals to shape the future of digital security and address emerging threats.
Security Champions: Introducing Them in Your Organization
Discover how to implement Security Champions in your organization, enhancing developer readiness for security challenges and secure coding practices. Learn about supporting OWASP tools and guidance.
Education and Communication in Information Security - Hack.lu 2018
Explore effective techniques for educating and communicating complex technical concepts, focusing on innovative approaches to enhance understanding and engagement.
More Than Just a Pretty Penny - Why You Need Cybersecurity in Your Culture
Discover strategies to integrate cybersecurity into workplace culture, empowering employees to identify and address potential risks, fostering a safer digital environment for your organization.
How to Handle Getting Dumped: Compromised Passwords
Learn strategies for managing password breaches, including identifying sources, responding effectively, and maximizing value while avoiding pitfalls in the aftermath of a company account compromise.
Evaluating Email User Security Tools: Checking, Nudging, and Scoring - SOUPS 2023
Evaluates three e-mail security tools to improve phishing detection, finding "suspicion score" nudge and "check" button most effective for professional users without hindering productivity.
Building an Evil Phone Charging Station
Explore the creation of malicious phone charging stations, understanding potential security risks and vulnerabilities in public charging infrastructure.
Insider Threats and New Economy Industries
Explore insider threats in emerging industries, examining vulnerabilities and strategies to mitigate risks in the evolving economic landscape.
Gig Work and the Digital Security Divide
Explores the impact of gig economy on digital security, highlighting how independent workers lack institutional security training and resources, potentially widening the security awareness gap among different social classes.
Elite Security Champions: Building a Strong Security Culture in DevSecOps
Explore building an elite Security Champion program for DevSecOps success. Learn essential skills, program elements, and strategies to create a strong security culture and maximize ROI.