Conference Talks

OWASP Foundation

When Molehill Vulnerabilities Become Mountainous Exploits

Explore how seemingly minor vulnerabilities can escalate into major security threats through live demonstrations, emphasizing the importance of comprehensive code scanning and proactive security measures.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Federated Login CSRF

Explore federated login CSRF vulnerabilities in OpenID Connect and OAuth 2.0, examining attack scenarios, risks, and mitigation strategies for secure identity linking in web applications.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Androsia - A Tool for Securing In Memory Sensitive Data

Innovative tool for securing sensitive data in Android apps through static analysis and bytecode transformation, enhancing defense-in-depth even after compromise.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Where We're Going, We Won't Need Passwords

Explore enterprise-wide multifactor authentication deployment, addressing technical challenges, user experience, and lessons learned for seamless workforce authentication across devices and legacy systems.

• YouTube
• 30 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Bug Bounty Programs - Successfully Controlling Complexity and Perpetual Temptation

Explore bug bounty programs with industry experts, covering implementation strategies, legal considerations, and best practices for effective vulnerability management and researcher collaboration.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Cryptography in the Age of Heartbleed

Cryptography expert discusses challenges in encryption, recent vulnerabilities in web protocols, and securing cryptographic software against sophisticated attackers, emphasizing the need for simplification.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

An Introduction to Quantum Safe Cryptography

Explore quantum-safe cryptography's importance as quantum computing threatens current encryption methods. Learn about new algorithms and projects ensuring long-term IT security in the post-quantum era.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

What the Kidnapping and Ransom Economy Teaches Us About Ransomware

Explore ransomware's parallels with real-world kidnapping, its economic dynamics, future trends, and strategies to combat this growing cyber threat in the digital age.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The DevSecOps Playbook - From A Practitioner's Perspective

Practical guide to implementing DevSecOps, covering mindset shifts, automation, communication strategies, skill requirements, and collaborative tools for safer software development.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Creating an AppSec Pipeline With Containers in a Week - How We Failed and Succeeded

Explore the journey of implementing an AppSec pipeline using Docker containers, addressing challenges, solutions, and best practices for effective security integration in development workflows.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Ways Hackers Are Taking To Win The Mobile Malware Battle

Explore cutting-edge mobile malware techniques, security paradigms, and detection methods. Live demo showcases creation of undetectable malware, highlighting challenges in mobile security.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

DevOops - Redux

Comprehensive guide to securing DevOps environments, covering AWS hardening, monitoring, disaster recovery, GitHub security, and best practices for CI/CD tools and developer workstations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Using Language-Theoretics and Runtime Visibility to Align AppSec with DevOps

Explore LANGSEC methodology and RASP tools for aligning AppSec with DevOps, enhancing runtime security visibility, and addressing vulnerabilities beyond traditional techniques.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Why Hackers Are Winning The Mobile Malware Battle - Bypassing

Explore mobile malware challenges, hacker tactics, and bypassing techniques in this insightful talk on the evolving landscape of mobile security threats and defenses.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Bug Hunting on the Dark Side

Explore bug hunting techniques in dark web applications, focusing on real-world examples, cryptography, and common vulnerabilities to enhance your cybersecurity skills.

• YouTube
• 39 minutes
• Self-Paced
• Conference Talk