Conference Talks

OWASP Foundation

Differences Between Web Application Scanning Tools When Scanning for XSS and SQLi

Investigates differences between web application scanning tools for XSS and SQLi, addressing challenges in modern web architectures and suggesting improvements for effective vulnerability detection.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Pushing Left Like A Boss - Application Security Foundations

Discover application security foundations and learn to 'push left' in the software development lifecycle. Explore strategies from vulnerability scanning to red team exercises for a proactive approach to security.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Incremental Threat Modeling

Learn incremental threat modeling techniques for complex projects, focusing on efficient security analysis without extensive initial time investment.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Practical Static Analysis for Continuous Application Security

Explore practical static analysis techniques for continuous application security, from simple grep to custom tools, enhancing software development lifecycle with targeted security checks.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Cleaning Your Applications' Dirty Laundry with Scumblr

Learn about Scumblr, an open-source tool for application security at scale. Discover how Netflix uses it for vulnerability management, risk tracking, and automating security tasks in a dynamic cloud environment.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Next Gen Web Pen Testing - Handling Modern Applications in a Penetration Test

Explore modern web application security testing techniques, including HTTP/2, WebSockets, CORS, REST APIs, and Content Security Policy. Learn to adapt penetration testing methods for evolving technologies.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

All Our APIs Are Belong to Us

Explores Snapchat's strategies to protect users from third-party API abuse, detailing server-side and client-side defenses, their effectiveness, and lessons learned in the ongoing security challenge.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Closing the Security Talent Gap

Practical strategies to address the growing security talent gap, including partnerships with academia, promoting security in job roles, and fostering diversity in the field.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Myths of Threat Modeling - AppSec California

Debunking common misconceptions about threat modeling in software security, providing insights to initiate and improve this crucial design activity for better application protection.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Security DevOps - Staying Secure in Agile Projects

Explore security integration in agile projects through dynamic depth, static depth, intensity, and consolidation axes. Learn practical DevOps techniques for maintaining security throughout development.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Lessons From DevOps - Taking DevOps Practices Into Your AppSec Life

Explore DevOps practices for enhancing application security, including workflow optimization, improved feedback loops, and automation techniques to streamline AppSec processes.

• YouTube
• 45 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Building an AppSec Pipeline - Keeping Your Program, and Your Life, Sane

Learn to build an efficient AppSec pipeline to streamline your security program, improve workflow, and enhance overall productivity in application security management.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Cloud Security at Scale and What it Means for Your Application

Explore Netflix's innovative cloud security strategies, including immutable servers, chaos engineering, and automated risk assessment tools, to enhance application security at scale.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Pentesting Swift Application with OWASP iGoat

Learn iOS Swift app pentesting using OWASP iGoat, covering security loopholes, defense strategies, and real-world case studies. Gain skills for product security engineers and bug bounty hunters.

• YouTube
• 15 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Anatomy of a WebShell

Explore WebShell malware: types, design, usage, and detection methods. Learn to identify and protect against this stealthy, powerful attacker tool used for long-term network compromise.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk