Conference Talks

OWASP Foundation

Topics of Interest - Top 10 Challenges for DevSecOps

Explore the top 10 challenges in implementing DevSecOps, focusing on integrating security into DevOps processes for precise, usable data and reduced business risk.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Bot or Human? Detecting Malicious Bots with Machine Learning in 2021

Explore advanced techniques for detecting sophisticated bots using machine learning, combining server-side and client-side signals, and leveraging supervised and unsupervised approaches for maximum accuracy.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Topics of Interest - Attacking the Microservice Systems - Methods and Practical Tips

Explore methods and practical tips for attacking microservice systems, focusing on security assessment approaches to identify vulnerabilities specific to this architecture.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Topics of Interest - An Attacker's View on APAC's 2021 Three Major Breaches

Explore an attacker's perspective on APAC's major 2021 breaches, analyzing causes and prevention strategies for enhanced cybersecurity awareness.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - It's Not Your Developers' Fault

Explore how software development evolution impacts security, from traditional methods to Cloud Native workloads, and why increasing breaches aren't solely developers' responsibility.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - The Future of DevSecOps Transformation

Explore the future of DevSecOps transformation, covering Agile methodologies, new roles, maturity models, and innovative approaches to pipeline engineering and quality feedback.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Code-Origin Policy - Towards a Formal User Privacy Protection for the Web

Explore a novel approach to web privacy protection through code-origin monitoring, offering customizable user safeguards and formal assurance mechanisms for JavaScript execution.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Achieving the Web Isolation Nirvana - How Far Along Are We?

Explore web isolation's evolution, current approaches, and future challenges. Learn about a client-side sandboxing solution and discuss the future of web application security.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Security As Code - The New Model Of Achieving Security At Scale

Explore the concept of Security-as-Code, a scalable approach to implementing security controls through codification, automation, and software engineering practices.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Redefining Threat Modeling - Security Team Goes on Vacation

Explore innovative self-serve threat modeling techniques that empower development teams to identify and mitigate security risks independently, enhancing overall application security and efficiency.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - AppSec Timeline - Wins, Failures, Promises, and Predictions

Explore AppSec's 20-year journey: achievements, setbacks, and future prospects. Analyze trends, evaluate DevSecOps impact, and gain insights into the evolving landscape of application security.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

AppSec - From Outsiders to Allies

Chris Wysopal explores AppSec's evolution from hacker-driven to a critical ally in software development, emphasizing the need for collaboration, shared accountability, and integrated security practices in modern development processes.

• YouTube
• 56 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Extending WAFs at the Application Layer

Explore application-level security control with Sanwaf, an alternative to traditional WAFs. Learn its structure, datatypes, and implementation for enhanced web application protection.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Social Media Botnet Detection with Linkage Analysis and Machine Learning

Explore techniques for detecting social media spam botnets using linkage analysis and machine learning, covering unsupervised and semi-supervised approaches and their applications.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Why Developers Struggle with AppSec

Explore challenges developers face in application security, trust issues, and solutions for integrating security into the development process, with insights on tools and production biases.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk