Preventing Security Bugs through Software Design
Learn strategies to prevent security vulnerabilities through API and framework design, focusing on SQL injection and XSS prevention techniques used successfully at Google.
Software Security Initiative Capabilities - Where to Begin
Explore key capabilities for starting a software security initiative, including penetration testing, code review, and secure design review. Learn benefits, drawbacks, and integration into mature security practices.
50 Shades of AppSec - Lessons from Diverse Application Security Scenarios
Explore the diverse landscape of application security, from sophisticated to absurd, and learn valuable lessons for future security efforts in this engaging keynote by Troy Hunt.
How to Find the Next Great Deserialization CVE - AppSecUSA 2016
Explore deserialization attacks, learn to find and exploit vulnerabilities, and discover open-source protection methods. Gain insights into the challenges of traditional AppSec defenses against these threats.
Bugs Ruin Everything - Keynote on Vulnerability Analysis and Exploitation
Explore vulnerability analysis techniques, their strengths and weaknesses, and real-world case studies with security expert Charlie Miller in this engaging keynote from AppSecEU 2016.
AppSec Awareness - A Blueprint for Security Culture Change
Discover strategies for building a sustainable security culture through AppSec awareness, focusing on human factors, knowledge sharing, and effective program architecture.
OWASP Security Knowledge Framework - Project Overview and Best Practices
Explore OWASP Security Knowledge Framework with project lead Glenn Ten Cate, discussing goals, milestones, and best coding practices for this essential security tool.
Skillful, Scalable Full-Stack Security in a State of Constant Flux
Approaches to maintaining secure full-stack posture at scale in changing environments. Discusses automation vs. human testing, analytics in continuous security, and scaling with human validation and intelligence.
Benchmarking Application Security Across Industries
Insights from 200,000+ application assessments reveal industry-specific software security trends, vulnerabilities, and best practices. Benchmark your AppSec program against peers for improved security outcomes.
Securing Software's Future: Why API Design Matters
Explore how API design can prevent vulnerabilities, guide developers towards secure implementations, and shape the future of software security through better development environments.
Practical Threat Modeling with Microsoft's Threat Modeling Tool 2016
Learn practical threat modeling using Microsoft's Threat Modeling Tool 2016. Explore data flow-based techniques, risk assessment, and countermeasures for effective application security.
Threat Modeling - A Brief History and the Unified Approach at Intuit
Unified approach to threat modeling combining STRIDE and asset-based methods. Focuses on identifying assets, attacker profiles, and controls for software architecture and system deployments.
Insecure Expectations - Testing for Common Security Issues in Rails Applications
Explore hands-on examples of security testing in Rails, learn about common vulnerabilities, and discover a new open-source tool for simplified security test writing. Gain practical skills to enhance your application's security.
Verifying Software for Security Bugs - Dynamic Analysis and Fuzzing Testing
Learn dynamic analysis and fuzzing techniques to verify software security, including mitigations and vulnerability checks. Explore BinSecSweeper, an open-source tool for binary analysis on Windows and Linux.
Tagging Your Code with a Useful Assurance Label
Learn to focus software vulnerability assessments on critical weaknesses across the development lifecycle, and create an "assurance tag" for binaries to enhance security efforts.
Wait Wait... Don't Tell Me Software Security - Panel Discussion
Panel discussion testing AppSec knowledge with industry experts through engaging quiz-style segments. Covers current security news, trends, and challenges in an entertaining format.
OWASP Periodic Table of Vulnerabilities
Explore a new approach to web security using the OWASP Periodic Table of Elements, focusing on eliminating vulnerabilities through perimeter technologies and application frameworks.
IEEE Computer Society's Center for Secure Design - Helping Design More Secure Software
Explore common software design flaws and learn strategies to create more secure applications with insights from the IEEE Computer Society's Center for Secure Design workshop.
BSIMM: A Decade of Software Security Evolution - Keynote
Explore the evolution of software security over a decade, from early concepts to modern practices, highlighting the BSIMM framework for measuring and improving security initiatives in software development.
OWASP AppSecUSA 2014 - Defenders Track Sessions
Explore cutting-edge cybersecurity topics including secure software design, memory scraping malware, cloud security, phishing detection, and attacks on in-memory platforms in this OWASP AppSecUSA conference.
Adventures in Reviewing Mountains of Code
Explore strategies for efficiently reviewing large codebases, including experiments, tools, and unexpected challenges encountered during a 2.6 million line code assessment.