Conference Talks

OWASP Foundation

Supplier Risk - Where OSS Collides With Vendor Management

Explore the intersection of open source software and vendor management, focusing on supplier risk, regulatory mandates, and strategies for mitigating potential threats in the software supply chain.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Yes, You Too Can Break Crypto - Exploiting Common Crypto Mistakes

Explore common cryptographic vulnerabilities and learn practical techniques to exploit them, enhancing your understanding of secure implementation and potential attack vectors.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center

Learn how to implement real-time vulnerability alerting using principles from the US Tsunami Warning Center, covering triage methods, data analysis, and prioritization techniques.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

OWASP SAMM 2 - Your Dynamic Software Security Journey

Explore OWASP SAMM 2, a dynamic framework for software security. Learn principles, assessment tools, and critical success factors to enhance your organization's security maturity.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Magecart 2020 - The New Face of XSS

Explore Magecart's evolution, injection techniques, and threat complexity. Learn from real-world case studies and discover strategies to prevent these sophisticated web skimming attacks.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

MLSec Going Deeper

Explore advanced machine learning security concepts, including adversarial samples, attack strategies, and defensive techniques for various ML models.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Enabling Message Level Protection at Uber

Explore Uber's approach to message-level protection, including encryption strategies, crypto interfaces, and developer evangelism for secure data handling at scale.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Application Logging in the Era of GDPR

Explore GDPR-compliant application logging practices, data privacy laws, and effective strategies for protecting sensitive information in production logs.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Insider Threat Detection & Automation by Behaviour Analytics

Learn to detect and automate insider threat prevention using behavior analytics, exploring UEBA, anomalies, and data-driven techniques for enhanced cybersecurity.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

A Dancefloor that is Literally Just Banana Peels - AppSec Awareness Program Pitfalls

Explore common pitfalls in AppSec awareness programs and learn effective strategies for implementation, audience engagement, and sustainable security education.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Before It's Out the Door - Securing Outbound Open Source

Explore strategies for securing open-source projects before release, covering governance, code review, and infrastructure. Learn to address security concerns and manage community projects effectively.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Breaches Are Everywhere - What’s A Good Security Leader To Do?

Explore strategies for security leaders to combat increasing breaches, from IoT vulnerabilities to phishing attacks. Learn essential skills and best practices for effective cybersecurity management.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Restricting the Scripts, You're to Blame, You Give CSP a Bad Name

Explore Content Security Policy's role in web security, covering script restrictions, TLS enforcement, and framing control. Learn best practices and developer insights for effective CSP implementation.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Practical OWASP CRS in High Security Settings

Learn to implement OWASP Core Rule Set for high-security web applications, covering WAFs, ModSecurity, logging, whitelisting, and advanced protection techniques.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Security We Need - Designing Usable IoT Security

Explore usable IoT security design principles to create user-friendly, effective protection. Learn strategies for clear communication, secure defaults, and seamless integration of security measures.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk