OWASP AppSec Europe 2014 - Builder and Breaker Track Sessions
Explore cutting-edge web security topics including DevOps, JavaScript vulnerabilities, XSS detection, Windows Store app testing, developer training effectiveness, and automated authorization checks.
Keynote on Web Application Security
Insightful keynote address exploring cutting-edge cybersecurity trends, challenges, and strategies in the rapidly evolving digital landscape.
XML External Entities Attacks - Advanced Exploitation Techniques
Explore advanced techniques for exploiting XML external entities vulnerabilities, including novel approaches for data theft, internal service manipulation, and denial of service attacks.
OWASP A9: Using Components with Known Vulnerabilities - A Year Later
Explore real-world case studies and industry trends on managing component vulnerabilities in applications, with insights on best practices and challenges in following OWASP A9 guidelines.
Threat Modeling Made Interactive - Using Poirot for Dynamic Security Analysis
Interactive demonstration of Poirot, a tool for modeling and analyzing system security during design phase, enabling real-time threat assessment and mitigation strategies.
Improved Phishing Detection Using Perceptual Hashing - AppSecUSA 2014
Explore advanced phishing detection using perceptual hashing algorithms, with insights on identifying malicious sites masquerading as popular platforms and a demonstration of new defensive tools.
Making Content Security Policy Work For You
Learn about Content Security Policy (CSP), its importance in web application defense, and practical tips for implementation from Mozilla's application security expert.
Reflections on Scoping Trust in Modern Web Environments
Reflections on trust in the modern web environment, examining gaps in current models and exploring ways to create a more trustworthy internet ecosystem without total self-reliance.
Wi-Fi Hacking for Web Pentesters
Explore Wi-Fi vulnerabilities and learn to leverage web pentesting skills for designing and deploying malicious access points. Gain insights into attacking clients, hijacking accounts, and stealing sensitive information.
Top 10 Web Hacking Techniques of 2013 - OWASP AppSecUSA 2014
Explore the top 10 innovative web hacking techniques of 2013, including Mutation XSS, BREACH, and HTML5 attacks. Learn about cutting-edge security vulnerabilities and their implications for web applications.
New Frameworks, Old Problems: Web Security Challenges in Modern Development
Exploring security challenges in modern web frameworks like Play! and Node.js, comparing solutions from established frameworks, and offering practical code examples to address common vulnerabilities.
Content Security Policy (CSP) - Understanding and Implementing Web Protection
Learn about Content Security Policy (CSP), a powerful browser security feature that mitigates cross-site scripting attacks. Discover its benefits, implementation strategies, and future impact on web security.
Seven Deadly Sins of Mobile Application Development - Unlocking Mobile Hacking Vulnerabilities
Unlock mobile app security secrets: Learn common development mistakes, session management vulnerabilities, and best practices to protect against attacks and impersonation.
The Perilous Future of Browser Security
Explore browser security challenges, tradeoffs, and solutions. Learn about critical vulnerabilities, secure browser design, and balancing security with user experience in the face of evolving threats.
Pushing Content Security Policy to Production - Case Study of Real-World Implementation
Practical insights on implementing Content Security Policy in a live web application, covering challenges, browser nuances, third-party integrations, and real-world violation reports.
Fixing XSS with Content Security Policy
Learn how Content Security Policy (CSP) can prevent XSS attacks, understand its versions, browser support, and implementation strategies for web applications. Gain insights on balancing CSP with traditional security measures.
Plan Your Learnings - Friendly User Testing for Automotive Software Updates
Explore friendly user testing for automotive software updates, balancing safety standards with innovation. Learn strategies for gathering user feedback and improving in-field performance.
Kong API Gateway Integration with Okta OIDC Authentication
Integrate Kong API gateway with Okta OIDC for seamless authentication, eliminating the need for your application to manage OIDC flows directly.
JWTs for CSRF and Microservices - Secure Implementation Examples
Learn to implement JWT-based CSRF protection and establish trust between microservices using JWTs, with practical code examples and insights into secure microservice architecture.
WebAuthn (FIDO2) and Project Fugu - Browser Capabilities and Authentication
Explore cutting-edge web technologies like WebAuthn for secure logins and Project Fugu for advanced browser capabilities, including machine learning and hardware integration.
How to Build and Deploy a Custom JWT Auth System - Ktor, MongoDB, Android
Comprehensive guide to building a JWT authentication system using Ktor, MongoDB, and Android, covering backend development, app integration, and server deployment on Ubuntu.