Open Source Encryption and Export Regulations - The New Compliance Frontier
Explore encryption in open source software, export regulations, and compliance strategies. Learn tools and best practices for identifying encryption and managing export compliance in commercial software solutions.
PHP Security Redefined - AppSecUSA 2015
Explore PHP's security evolution, best practices, and tools for safer application development, with insights on PHP 7's improvements and community-driven security initiatives.
Game of Hacks - The Mother of All Honeypots
Explore real-time hacker adaptations to web app security measures through an interactive honeypot experiment. Learn valuable insights for strengthening enterprise applications against evolving threats.
Project Monterey: Automating Security Testing in Cloud Deployments
Explore automated security testing for cloud deployments with Project Monterey. Learn how Netflix scales traditional tools and integrates custom solutions for continuous security in a dynamic environment.
OWASP Global Board Keynote - AppSecUSA 2014
Keynote address from OWASP Global Board at AppSecUSA 2014, discussing latest developments and strategies in application security. Offers insights for cybersecurity professionals and developers.
Active Scan Augmenting Manual Testing with Attack Proxy Plugins
Explore advanced web security techniques with ActiveScan++, a Burp Suite plugin for detecting complex vulnerabilities like host header poisoning and code injection through heuristic probes and automated analysis.
Practical Tips for Web Application Security in the Age of Agile and DevOps
Practical tips for adapting web application security to agile and DevOps environments, focusing on lightweight controls, visibility, and measuring maturity in modern development practices.
Misconfigured CORS and Web Application Security Challenges
Explore CORS misconfiguration vulnerabilities and the challenges of implementing advanced browser security features, with insights on balancing security and operational complexity.
Continuous Integration: Live Static Analysis Using Visual Studio and the Roslyn API
Explore live static analysis in Visual Studio using Roslyn API for secure coding. Learn to create custom rules, integrate secure code scanning, and enhance .NET application security.
Grip on Secure Software Development - Dutch Government Standard for Outsourcing - AppSecEU 2016
Learn about the Dutch government's standard for secure outsourcing, exploring key principles and practices for effective implementation in software development projects.
OWASP Top Ten Proactive Controls for Secure Web Development
Learn essential secure coding techniques for web development, covering validation, authentication, access control, encoding, data protection, and secure architecture to build robust and protected applications.
Continuous Cloud Security Automation
Distributed framework for scalable security automation in cloud environments. Easily integrates tools, minimizes false positives, and supports continuous software delivery across teams.
QARK: Android App Exploit and Static Code Analysis Tool
Explore QARK, a comprehensive tool for Android app security analysis and exploitation. Learn how it combines static code analysis, vulnerability detection, and automatic exploit generation for developers and pentesters.
Chimera - Securing a Cloud App Ecosystem with ZAP at Scale
Explore Chimera: a cloud-based solution using ZAP to enhance security for small developers and ISVs in large app ecosystems, making advanced scanning tools accessible without security expertise.
Using Third-Party Components for Building Secure Software - AppSec EU 2016
Explore secure software development, third-party component risks, and maintenance strategies for effective vulnerability management in enterprise applications.
The ABCs of Source-Assisted Web Application Penetration Testing
Learn advanced web application penetration testing techniques using source code analysis for improved vulnerability detection and assessment.
Static Code Analysis of Complex PHP Application Vulnerabilities
Explore advanced static code analysis techniques for detecting complex PHP vulnerabilities, including first-order, second-order, and object injection issues.
Can SaaS Ever Be Secure? - Security Risks and Compliance in Cloud Services
Explore security challenges and solutions for SaaS, including regulatory compliance, data transfers, and risk assessment. Learn key takeaways for ensuring secure cloud-based services.
Mobile Application Assessments By The Numbers - A Holistic View
Explore mobile app security through data-driven insights, examining vulnerabilities and best practices for comprehensive assessments in this OWASP presentation.
From Zero to Hero - How OWASP Saved My Holiday
Discover how OWASP resources can transform your cybersecurity skills and protect your digital life, as demonstrated through a real-world holiday scenario.
Security Touchpoints When Acquiring Software
Explore key security considerations and touchpoints in software acquisition, focusing on best practices for ensuring secure integration of third-party solutions.