Conference Talks

OWASP Foundation

5 Steps to Drive Enterprise Software Security

Learn a disciplined five-step approach to implement enterprise-wide software security initiatives, addressing organizational challenges and ensuring productive application security efforts.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

To Bounty or Not to Bounty - Security@ Insights from 500 Organizations

Insights from 500 organizations on vulnerability disclosure programs, analyzing key factors for success and providing a framework to assess program performance and impact.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Sinking Your Hooks in Applications

Techniques for automatically enhancing application security through code hooking and injection, demonstrated across Java, .NET, and Ruby frameworks without requiring developer intervention.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Node.js Highway - Attacks Are At Full Throttle

Explore Node.js security vulnerabilities, attack vectors, and best practices for safeguarding applications in this comprehensive overview of potential threats and defensive strategies.

• YouTube
• 42 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Client-Side Protection Against DOM-Based XSS Done Right

Comprehensive overview of client-side protection against DOM-based XSS attacks, covering vulnerabilities, prevention techniques, and practical solutions for web security professionals.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Windows Phone App Security for Builders and Breakers

Explore Windows Phone app security for developers and testers, covering encryption, secure data handling, and protection against common vulnerabilities and attacks.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Securing the Internet of Things

Explore IoT security challenges and solutions, covering smart devices, common verticals, technologies, and key vulnerabilities in this comprehensive talk on securing the Internet of Things.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Scaling Security in Agile Scrum

Learn strategies for integrating security into Agile Scrum development, optimizing interactions between security and engineering teams, and fostering in-house security expertise for efficient monthly releases.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers

Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

AutoScaling Web Application Security in the Cloud

Explore auto-scaling web application security in cloud environments, focusing on practical examples using AWS. Learn techniques, tools, and strategies for effective security implementation in rapidly scaling applications.

• YouTube
• 41 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Application Security Playbook for Business

Learn strategies for implementing robust application security, addressing challenges, and achieving desired outcomes in today's rapidly evolving digital landscape.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Flipping the Script on Application Security

Learn about GitHub's developer-first approach to application security, addressing common DevSecOps challenges and exploring innovative solutions like credential scanning and static analysis.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Temporal - Decoded - Leverage Cybersecurity as a Business Enabler

Discover how to transform cybersecurity from a cost center to a business enabler through strategic auditing, stakeholder engagement, and operational integration.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Struts 2 Must Die - The Life and Inevitable Death of Java’s Spaghettiest Framework

Explore Struts 2's evolution from modern framework to security liability. Dive into OGNL vulnerabilities, architectural flaws, and exploit techniques. Learn why Struts 2 persists in production and its potential for massive damage.

• YouTube
• 20 minutes
• Self-Paced
• Conference Talk

OWASP Foundation

Testing Security the Right Way

Integrating QA into security testing: strategies for comprehensive SDLC security, including examples and templates for immediate implementation in development projects.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk