OWASP Security Knowledge Framework
Learn about the OWASP Security Knowledge Framework, its features, and how it can enhance your application security practices through this informative presentation by the project creators.
Secure CI/CD Using JSON Web Token (JWT)
Explore how GitLab leverages JWT for secure access to secret management solutions, enhancing DevSecOps practices and addressing challenges in retrieving sensitive data across cloud providers.
Handling JWTs: Understanding Common Pitfalls
Explore JWT authentication, common pitfalls, and security best practices. Learn about JWT structure, verification, and protection against attacks like algorithm confusion and secret brute-forcing.
Securing Web Services with Let's Encrypt and Cert Manager
Automate SSL/TLS certificate management for web services using Let's Encrypt and Cert Manager, enhancing security and simplifying deployment in cloud-native environments.
The Beginner's Guide to Blind XSS - Cross-Site Scripting
Learn to identify and exploit Blind XSS vulnerabilities, a critical web security flaw. Discover tools like XSS Hunter and gain practical skills for ethical hacking and bug bounty hunting.
Could Passwordless Authentication Be Worse Than Passwords?
Explore vulnerabilities in passwordless authentication, revealing how faulty implementations can lead to greater security breaches than traditional passwords. Learn best practices for developers, pentesters, and users.
The Attacker's Guide to Exploiting Secrets in the Universe
Explore methods to discover and exploit secrets in git repositories, containers, and compiled apps. Learn about vulnerabilities in API keys and credentials across various environments.
Looking Beyond Prompts for Permissions in Chrome
Exploring challenges with web permission prompts and innovative UI patterns to enhance user control and decision-making in Chrome's security features.
FIDO2: The Superior Multi-Factor Authentication Framework
Explore FIDO2, a superior multi-factor authentication framework. Learn its functionality, benefits over traditional methods, and see demos of setup and configuration, including passwordless authentication and passkeys.
Keycloak: The Open-Source IAM for Modern Applications
Explore Keycloak, an open-source identity and access management solution. Learn its features, flexibility, and compliance capabilities for modern applications, as well as future developments and contribution opportunities.
Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall
Explore Zero Trust principles and next-gen Web Application Firewall technology for securing modern cloud applications against sophisticated cyber attacks, featuring Coraza and OWASP CoreRuleSet.
Native Messaging for Strictly Confined Browsers
Explore native messaging implementation for Firefox snap, including WebExtensions portal and browser changes. Demonstration of functionality with extensions and future plans for other browsers.
Web Security: Why It Matters and Best Practices - Mozilla Developer Roadshow Asia
Explore web security essentials, privacy concerns, and best practices for safer online interactions with Mozilla TechSpeaker Mijanur Rahman Rayhan.
An Introduction to Let's Encrypt - SSL/TLS, HTTPS, and Free Automated Certificates
Explore Let's Encrypt: A free, automated certificate authority revolutionizing internet security. Learn its history, benefits, and impact on HTTPS adoption.
Our Privacy and the Web - Combating Online Surveillance
Explore Firefox's efforts to combat online surveillance and protect user privacy, including tracking protection, DNS over HTTPS, and lean data practices for a safer web experience.
Keynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking
Comprehensive exploration of web request forgery attacks and defenses, covering CSRF, SSRF, and clickjacking. Provides practical strategies for developers to secure web applications against these vulnerabilities.
Harmonizing OWASP API and Application Top 10 Security Risks - Combining Lists for Comprehensive Coverage
Explore API security risks, comparing OWASP's API and Application Top 10 lists. Learn detection and prevention strategies for vulnerabilities in web services, APIs, and GraphQL.
The How and Why of the OWASP Top Ten 2021
Explore the OWASP Top Ten 2021 update, its significance, and data-driven insights. Learn about critical application security risks, analysis methodologies, and industry impact.
Bots Gone Phishing - Defending Against Automated Attacks and Phishing
Explore techniques to defend against phishing bots using obfuscation and one-time tokens, increasing costs for attackers while protecting web applications and APIs from automated threats.
How to Thwart Malicious Automation and Kick Bot Butt for $0
Learn to defend against malicious bots and automated attacks using free, open-source solutions. Gain insights on threat profiling, defensive tactics, and implementation strategies for effective cybersecurity.
Roadblocks for Content Security Policy (CSP) Implementation - Developer Challenges and Solutions
Explore challenges in implementing Content Security Policy (CSP) for web security, including complexity, legacy code, and browser support. Learn strategies to overcome obstacles and enhance CSP deployment.