Tournesol - Towards a Collaborative Governance of the Web
Explore collaborative web governance through Tournesol, addressing online misinformation and propaganda. Learn about challenges and solutions for secure, trustworthy information prioritization on the internet.
Lightweight Enterprise Java with MicroProfile
Discover how MicroProfile optimizes Enterprise Java for microservices, enabling lightweight, portable applications that can run anywhere, even on a Raspberry Pi. Learn to develop efficient, scalable solutions.
Excellent Ways to Secure Your Spring Boot Application
Learn essential techniques to secure Spring Boot applications, including HTTPS, dependency scanning, CSRF protection, CSP implementation, OIDC authentication, and password hashing.
The Survival Guide to Modern Apps AuthN and AuthZ Specs
Comprehensive overview of modern authentication and authorization standards for applications and APIs, covering SSO, token-based security, OAuth2, FIDO, and more.
AppSec is Too Hard
Explore common AppSec pitfalls, robust security approaches, and practical examples to improve application security and make it more manageable at scale.
Everything in Spring Security 6 Baked with a Spring Boot 3 Recipe
Explore Spring Security 6 updates with Spring Boot 3, covering new features, changes, and the authorization server project. Learn why upgrading matters and how to implement these enhancements.
Spotlight on Latest Web Application and API Attack Data
Gain insights into global web application and API attack trends, methodologies, and tools. Analyze regional and industry-specific differences, with a focus on API security challenges.
The Hidden Risk in Undocumented API Behavior
Explore undocumented Win32 API risks affecting AV and EDR vendors, potential attacks, and lessons learned for improved cybersecurity practices.
Web API Testing: Fundamentals and Best Practices
Learn to test for API vulnerabilities and explore OWASP guidelines in this practical tutorial on identifying and addressing web API security issues.
Deploying and Upgrading Your First API in 30 Minutes or Less
Deploy and manage APIs efficiently using IBM API Connect. Learn to develop, secure, and upgrade APIs in a single environment, streamlining the process for beginners and experienced developers alike.
How to Steal ChatGPT's Embedding Size and Other Low-rank Logit Tricks
Uncover hidden information about API-protected LLMs through low-rank logit analysis. Learn to estimate embedding sizes, audit model updates, and identify source models efficiently.
Hyper Speed! When Big Data Blooms
Explore high-speed data processing using Bloom Filters, a powerful probabilistic data structure. Learn to handle massive data volumes efficiently, with real-world examples and advanced techniques.
Getting API Security Right
Explore best practices for securing APIs through real-world cases. Learn about attack surfaces, authorization issues, and actionable guidelines to enhance API security.
Google Family Link Field Test
Explore security vulnerabilities in Google Family Link and learn how teenagers can bypass restrictions using third-party apps. Discover mitigations to preserve digital wellbeing policies.
What Happens if I Change This URI - Oooooh
Explore broken access control vulnerabilities, their impact, prevention methods, and efficient testing techniques in web applications.
Hacking the Juice Shop
Hands-on guide to setting up and using OWASP Juice Shop for Capture The Flag events. Learn to host your own security awareness competitions and improve hacking skills.
Introducing the OWASP Top 10 for Kubernetes
Explore Kubernetes security risks, including workload configurations, supply chain vulnerabilities, and RBAC issues. Learn mitigation strategies and best practices for securing containerized infrastructure.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, ensuring robust defense against unauthorized access and data breaches.
25 Years of SSL - Secure(ish) Sockets Layer
Explore the 25-year evolution of web encryption, its challenges, recent advancements, and future prospects in securing online communication and privacy.
Let's Stop Blaming Our Users for Getting Hacked When It Is Our Problem to Solve
Explores FIDO2 as a superior authentication method, discussing its advantages over traditional 2FA and demonstrating how it can protect users from phishing attacks and enhance web application security.
Creating a Secure Web Server from Two Vulnerable Web Servers
Discover how to build a secure web server by comparing responses from multiple servers across different operating systems to detect and prevent zero-day exploits and vulnerabilities.