Conference Talks

OWASP Foundation

OWASP Flagship Projects - OWASP Juice Shop

Explore OWASP Juice Shop, a vulnerable web application for security training. Learn about challenges, cross-site scripting, coding exercises, and future enhancements in this comprehensive overview.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Cloud-Native Application Security Top 10 Flagship Project

Explore key security challenges and best practices for cloud-native applications, focusing on OWASP's top 10 vulnerabilities and mitigation strategies.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Flagship Projects - OWASP Amass

Explore OWASP Amass, a powerful tool for information gathering and external asset discovery in cybersecurity. Learn its features, data sources, and future developments.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Flagship Projects - OWASP Security Knowledge Framework

Explore the OWASP Security Knowledge Framework, its features, and security lifecycle. Learn about OSS projects, demo labs, and expert wizards for enhancing application security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Flagship Projects - OWASP ModSecurity Core Rule Set

Explore OWASP ModSecurity Core Rule Set: web application firewall rules, paranoia levels, and project developments for enhanced security and threat protection.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Standard Classification - API Security Top 10 - A Beginner's Guide to Mitigation

Learn to mitigate API security risks using OWASP's Top 10 classification. Explore vulnerabilities, solutions, and strategies for implementing robust API security throughout the entire lifecycle.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Standard Classification - Rough Consensus - An OWASP Story

Explore OWASP's journey in establishing software security standards through rough consensus, highlighting challenges, achievements, and future directions in the field.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP Standard Classification - Achieving Security by Shifting Left in Agile

Integrating security into Agile development through persona-based stories, prioritization, and testing strategies to create more secure web applications and shift security left in SDLC.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Topics of Interest - Agile Threat Modeling with Open-Source Tools

Explore agile threat modeling using open-source tools to capture project risk landscapes efficiently. Learn about Threagile, a developer-friendly toolkit for continuous threat modeling in DevSecOps environments.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Topics of Interest - Common NGINX Misconfigurations That Leave Your Web Server Open To Attack

Explore common NGINX misconfigurations, their security implications, and remediation strategies. Learn to identify and fix vulnerabilities in web server setups through demos and expert insights.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Using Binary Search Algorithms for Blind SQL Injection

Explore efficient blind SQL injection techniques using binary search algorithms, enhancing penetration testing skills and applying programming knowledge to real-world security challenges.

• YouTube
• 32 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

All Your Ether Belong to Us - Hacking Ethereum-Based DApps

Explore Ethereum-based DApp vulnerabilities, attack methods, and protection strategies. Learn about blockchain technology, smart contracts, and the security challenges in decentralized applications.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - The Future Is Simple - Introducing the CRE

Introducing the Common Requirement Enumeration (CRE) initiative: a unified framework linking security standards to simplify and integrate application security across domains and stakeholders.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Topics of Interest - React Native Security - Addressing Typical Mistakes

Explore React Native security, common pitfalls, and best practices. Learn to address risks, manage permissions, detect jailbreaks, and implement secure storage in mobile app development.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Topics of Interest - Automatic Vulnerability Remediation - The Trusted and Secure Road to Developer Happiness

Explore automatic vulnerability remediation's potential to expedite product releases, free up development resources, and enhance software security while addressing developer trust concerns.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk