Conference Talks

OWASP Foundation

Human Factors That Influence Secure Software Development

Explores human factors influencing secure software development, including environmental conditions, developer characteristics, and team dynamics. Discusses strategies to identify and mitigate vulnerability-prone code before issues arise.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Battle Tested Application Security

Insights on building effective Application Security programs, focusing on security culture, defensive capabilities, and organizational empowerment across different environments.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Flying Above the Clouds - Securing Kubernetes

Explore Kubernetes security, from container isolation to authentication and authorization. Learn to build resilient cloud-native systems and deploy secure services in a distributed environment.

• YouTube
• 53 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Breaking Fraud and Bot Detection Solutions

Demystifying browser fingerprinting and user behavior tracking in fraud detection, exploring vulnerabilities, and sharing real-world implementation flaws in bot prevention systems.

• YouTube
• 35 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Serverless Infections - Malware Just Found a New Home

Explore serverless security risks through a live demo of RCE attacks, data infiltration, and self-duplicating malware in cloud environments. Learn best practices for securing serverless architectures.

• YouTube
• 34 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Web Application Compromise Mitigation with Crypto Anchoring - AppSecUSA

Explore crypto anchoring as a solution to protect sensitive data from breaches, paired with effective monitoring for enhanced web application security.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Scratching the Surface of Your CD - Continuous Delivery and Application Security Challenges

Explore strategies for integrating continuous security testing into fast-paced Continuous Delivery environments, addressing challenges and streamlining processes for modern development workflows.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Security as a Service - Work Where You Engineers Live

Integrating security into existing development workflows for efficient vulnerability management and faster response times. Learn how to leverage automation and project tracking tools to enhance security practices.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Open Source Security Tools for Kubernetes Applications

Explore open-source tools for securing Kubernetes applications, covering image scanning, runtime security, and anomaly detection. Learn practical strategies for maintaining a secure cloud-native environment.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Lessons from Integrating Third Party Library Scanning in DevOps Workflow

Integrating third-party library scanning in DevOps: automation strategies, architectural choices, and best practices for secure development at scale. Tips for seamless implementation and measuring success.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Perimeter-less - Engineering the Future of Defense

Explore modern defense strategies for complex digital ecosystems, focusing on designing defensible systems beyond traditional perimeter security to protect platforms, applications, and services at internet scale.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

FIESTA - An HTTPS Side-Channel Party

Explore HTTPS side-channel vulnerabilities and a new tool, FIESTA, for testing and exploiting these issues. Learn about a novel side-channel affecting major tech companies and its implications for online security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Building Secure Software With OWASP Tools and Guides

Explore OWASP's comprehensive tools and guides for building secure software throughout the development lifecycle, from policy creation to implementation and verification.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Optimize Your Pentesters Time

Optimize pentesting resources with Hunter, an open-source tool grading websites for low-risk security issues. Learn how eBay saved 10-15% of their pentesting budget and improved efficiency.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Lessons From the Threat Modeling Trenches

Insights from building threat modeling practices across organizations, focusing on reducing design errors. Explores lessons learned, challenges faced, and strategies for effective implementation in software security.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk