All Software is Open Source - An Introduction to Reverse Engineering
Explore reverse engineering fundamentals, tools, and strategies for information security. Learn legal aspects, safe practices, and real-world applications through war stories and CTF challenges.
What is Our Ethical Obligation to Ship Secure Code?
Explore ethical obligations in secure coding, data breaches, and developer responsibilities. Gain insights on improving security practices and addressing user privacy concerns.
Trick or Treat - Unveil the "Stratum" of the Mining Pools
Unveil mining pool strategies, identify Stratum servers, and explore cryptomining malware detection techniques through static and dynamic analysis, web scraping, and network scanning.
Practical Uses of Program Analysis - Automatic Exploit Generation
Explore automatic exploit generation through program analysis techniques, including instrumentation and symbolic execution, with practical demonstrations and tool insights.
From Email Address to Phone Number - A New OSINT Approach
Explore innovative OSINT techniques to uncover phone numbers from email addresses, enhancing privacy and security investigations with cutting-edge methodologies and tools.
WAFs FTW! A Modern DevOps Approach to Security Testing Your WAF
Explore modern DevOps approach to security testing Web Application Firewalls (WAFs) using Framework for Testing WAFs (FTW). Learn objective WAF evaluation, rapid prototyping, and continuous testing strategies.
Cryptography in the Age of Heartbleed
Cryptography expert discusses challenges in encryption, recent vulnerabilities in web protocols, and securing cryptographic software against sophisticated attackers, emphasizing the need for simplification.
The DevSecOps Playbook - From A Practitioner's Perspective
Practical guide to implementing DevSecOps, covering mindset shifts, automation, communication strategies, skill requirements, and collaborative tools for safer software development.
Creating an AppSec Pipeline With Containers in a Week - How We Failed and Succeeded
Explore the journey of implementing an AppSec pipeline using Docker containers, addressing challenges, solutions, and best practices for effective security integration in development workflows.
Incremental Threat Modeling
Learn incremental threat modeling techniques for complex projects, focusing on efficient security analysis without extensive initial time investment.
The Ways Hackers Are Taking To Win The Mobile Malware Battle
Explore cutting-edge mobile malware techniques, security paradigms, and detection methods. Live demo showcases creation of undetectable malware, highlighting challenges in mobile security.
Practical Static Analysis for Continuous Application Security
Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.
Cleaning Your Applications' Dirty Laundry with Scumblr
Learn about Scumblr, an open-source tool for application security at scale. Discover how Netflix uses it for vulnerability management, risk tracking, and automating security tasks in a dynamic cloud environment.
Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test
Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.
Why Hackers Are Winning The Mobile Malware Battle - Bypassing
Explore mobile malware challenges, hacker tactics, and bypassing techniques in this insightful talk on the evolving landscape of mobile security threats and defenses.
Bug Hunting on the Dark Side
Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.
Myths of Threat Modeling - AppSec California
Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.
Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life
Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.
Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane
Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.
Scaling Security in Agile Scrum
Learn strategies for integrating security into Agile Scrum development, optimizing interactions between security and engineering teams, and fostering in-house security expertise for efficient monthly releases.
Application Security Playbook for Business
Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.