Embedded Systems Security - Common Threats and Best Practices
Explore embedded system security threats, proactive controls, and best practices to protect interconnected devices from vulnerabilities and potential DDoS attacks.
What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities
Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.
Security and the Self-Contained Unit of Software - AppSec EU 2017
Exploring security challenges in modern software development, focusing on self-contained components and shifting security features from infrastructure to application level.
Improving the Security of Software Defined Infrastructures - AppSec EU 2017
Explore security challenges in Software Defined Infrastructures, learn attack surfaces, vulnerability identification techniques, and remediation strategies for configuration management tools like Puppet or Chef.
Requirements Gathering for Successful DevSecOps Pipeline - AppSec EU 2017
Discover key requirements for implementing a security-focused automated development pipeline in your organization, addressing assessment, bottlenecks, training, metrics, and monitoring.
SDLC for the DevSecOps Era - Adapting Application Security Techniques
Practical lessons on adapting application security techniques for agile development, covering lightweight controls, visibility, and measuring security maturity in modern DevOps environments.
Embedding GDPR Into the Secure Development Lifecycle
Practical guide to integrating GDPR requirements into software development lifecycle, covering privacy awareness, risk analysis, secure coding, and breach notification processes.
The Flaws in Hordes, The Security in Crowds - Crowdsourced Security Models
Explores the effectiveness of bug bounty programs in improving application security, discussing strategies for success and potential pitfalls to avoid. Examines trends in appsec automation and remaining challenges.
Twubhubbook - Building an AppSec Program for Startups
Learn strategies for implementing an effective application security program in startups from GitHub security experts, focusing on automation and practical approaches to secure software development.
AppSec Pipelines and Event-based Security - Moving Beyond Traditional Security Testing
Explore event-based security and AppSec pipelines to enhance traditional security testing methods. Learn innovative approaches for improving application security from an experienced professional.
DASTProxy: Automated Security Testing Focused on Business Context
Explore DASTProxy: a tool for automated security testing that focuses on business context rather than crawling, enhancing efficiency and effectiveness in application security assessments.
InfoSec at Peak Prevention
Explore InfoSec at Peak Prevention with Daniel Miessler, an experienced security tester and consultant. Learn about cutting-edge strategies in application security and IoT security from an industry expert.
When Bandit Strikes - Defending Your Python Code
Learn to defend Python code against security threats with insights from experts Will Bengtson and Travis McPeak. Discover proactive strategies and best practices for enhancing your application's security posture.
Bypassing Browser Policies and Privacy Extensions for Cookies
Explore bypasses to browser policies and extensions for cookie security. Learn about an automated framework for evaluating countermeasures against cross-site attacks and third-party tracking.
Automated Cyber Security Platform at Scale
Explore the vision and demo of an open-source Automated Security Platform, addressing sophisticated threats through security orchestration and automation to overcome data and process overload.
Software Bill of Materials (S-BoM) - Reducing Risk in Third-Party Components
Explore best practices for managing third-party component risks using software bill-of-materials (S-BoM). Learn to create S-BoMs, identify vulnerabilities, and automate security responses in polyglot environments.
Adding Privacy to Threat Modeling - Game On!
Explore how LogMeIn extended the Elevation of Privilege card game to incorporate privacy considerations, bridging knowledge gaps between development, security, and compliance teams through gamification.
How to Break APIs - Security Testing Techniques
Comprehensive guide to identifying and exploiting vulnerabilities in APIs, focusing on practical techniques for security testing and penetration.
AppSec is Dead - Long Live DevSecOps
Explore the shift from AppSec to DevSecOps, focusing on creating secure code, working smarter, and implementing key pillars for effective security integration in software development.
OWASP NL Chapter Meeting - SKF News
Learn about the latest developments in OWASP's Security Knowledge Framework (SKF) from experts Riccardo and Glenn ten Cate, enhancing your understanding of web application security best practices.
Virtual AppSec Days Lightning Conference
Explore cutting-edge application security topics with industry experts in this fast-paced, informative conference session from OWASP Foundation.