50 Shades of AppSec - Lessons from Diverse Application Security Scenarios
Explore the diverse landscape of application security, from sophisticated to absurd, and learn valuable lessons for future security efforts in this engaging keynote by Troy Hunt.
Attack Patterns for Black-Box Security Testing - AppSecEU 2016
Explore attack patterns for black-box security testing in web applications, focusing on methodologies and strategies to identify vulnerabilities effectively.
From DTD to XXE - An Evaluation of XML Parsers
Comprehensive evaluation of XML parsers, exploring vulnerabilities from DTD to XXE attacks. Gain insights into secure XML parsing and learn to mitigate potential security risks.
OWASP ZAP - More Advanced Features
Explore advanced features of OWASP ZAP, a powerful open-source web application security testing tool, with insights from Simon Bennetts at AppSecEU 2015 in Amsterdam.
Bringing Security Testing to Development: Enabling Developers as Security Experts
Discover strategies for integrating security testing into development processes, empowering developers to become security experts and enhance application safety.
Web Service Workers - Breaking the Web: Exploiting a Cool Feature
Explore Web Service Workers' potential to disrupt web security, examining innovative uses and potential vulnerabilities in this cutting-edge browser feature.
Running a Bug Bounty Program - What You Need to Know
Discover essential insights for running successful bug bounty programs, including strategies, resources, and best practices for effective vulnerability management and rewards.
Internet Banking Safeguards Vulnerabilities - AppSecEU 2016
Explore internet banking vulnerabilities, attack patterns, and safeguards. Learn about transaction authorization best practices, user authentication, and regulatory requirements for secure online banking.
Benchmarking Application Security Across Industries
Insights from 200,000+ application assessments reveal industry-specific software security trends, vulnerabilities, and best practices. Benchmark your AppSec program against peers for improved security outcomes.
15 Years of Web Security - The Rebellious Teenage Years
Explore web security's evolution, challenges, and future trends with insights on threat modeling, vulnerability data, and emerging solutions like cyber insurance and security guarantees.
Adaptive Testing Methodology: Crowdsourced Testing for Customized Target Stack
Discover an efficient, customizable pentesting methodology that adapts to specific technology stacks and time constraints, improving consistency and effectiveness in vulnerability detection.
Best Practices for Structuring Effective Bug Bounty Programs
Explore best practices for structuring effective bug bounty programs, addressing concerns like security, privacy, and legal issues while maximizing vulnerability identification.
Rise of the Machines - How Automated Processes Overtook the Web
Explore how automated processes have dominated web interactions, their impact on security, and strategies to protect against machine-driven threats in modern web environments.
Marshalling Pickles - How Deserializing Objects Can Ruin Your Day
Explore vulnerabilities in object serialization across languages, learn exploitation techniques for code execution, and discover protective strategies against deserialization attacks.
Medical Device Security: An Infectious Disease - Risks and Vulnerabilities
Explore vulnerabilities in medical devices and healthcare systems, examining potential risks to patient safety and discussing strategies for improving security in the healthcare landscape.
Analyzing and Detecting Flash-Based Malware
Explore techniques for analyzing and detecting Flash-based malware, enhancing your cybersecurity skills and understanding of this prevalent threat vector.
Leveling Up Your Application Security Program
Learn strategies to enhance your organization's application security program, focusing on key improvements and best practices for robust cybersecurity.
Practical Threat Modeling with Microsoft's Threat Modeling Tool 2016
Learn practical threat modeling using Microsoft's Threat Modeling Tool 2016. Explore data flow-based techniques, risk assessment, and countermeasures for effective application security.
Maliciously Monetizing AppSec Features - It's All About the Money
Explore malicious monetization of AppSec features with Or Katz and Ezra Caltum. Learn about potential security vulnerabilities and their financial implications in application development.
Monitoring Web Sites for Malware Injection with Web Detector
Explore WebDetector, a tool for monitoring websites and detecting malware injections. Learn about its components, heuristics, and effectiveness in identifying harmful elements on web pages.
Owning the Message Oriented Middleware - Security Analysis and Attacks
Explore enterprise messaging security from JMS API, ActiveMQ vulnerabilities, and JMSDigger tool perspectives. Learn offensive techniques and live demonstrations for assessing messaging applications.