Conference Talks

OWASP Foundation

How Do JavaScript Frameworks Impact The Security Of Applications

Explore JavaScript frameworks' impact on application security, analyzing mitigation levels, case studies, and CSRF protection across popular frameworks like Meteor.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Web Apps vs Blockchain DApps - Tools, Vulns And Standards

Explore the security aspects of decentralized applications (DApps) and smart contracts, covering tools, vulnerabilities, and standards across the development lifecycle.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

OWASP Foundation

The Woman Who Squashed Terrorists - When An Embassy Gets Hacked

Discover how a cybersecurity expert thwarted a terrorist hack on an embassy, exploring the incident's origins, diplomatic implications, and crucial lessons for global security.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

OWASP Foundation

The State of Credential Stuffing and the Future of Account Takeovers

Explore credential stuffing, account takeovers, and evolving cybersecurity threats. Learn about attack methods, defense strategies, and the future of online fraud prevention.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

OWASP Foundation

XSS is Dead - We Just Don't Get It

Exploración crítica de la persistencia del XSS, analizando su historia, fracasos en su mitigación y factores que contribuyen a su continuidad. Se cuestiona su relevancia actual y se proponen reflexiones sobre el futuro de la seguridad web.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

OWASP Foundation

OWASP Top 10 for JavaScript Developers

Explore JavaScript vulnerabilities in OWASP Top 10, covering client and server-side issues with focus on modern frameworks and NodeJS. Learn prevention techniques for secure web development.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Testing and Hacking APIs

Learn techniques for testing and exploiting API vulnerabilities, including understanding implementation, detecting weak points, and conducting effective penetration tests on modern applications.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Magecart - A Growing Threat to E-Commerce Sites

Explore Magecart's e-commerce threats, attack techniques, and defense strategies. Learn about vulnerabilities, compromises, and protective measures for online shops and payment systems.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

OWASP Foundation

DevSecOps with OWASP DevSlop

Learn DevSecOps through hands-on examples with OWASP DevSlop. Explore secure component management, secret handling, testing techniques, and open-source tools to enhance your pipeline security.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Lessons Learned from the DevSecOps Trenches

Panel discussion on scaling AppSec programs, featuring insights from security leaders at major tech companies. Covers high-ROI efforts, effective tools, and lessons learned to help organizations improve their security practices.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Preventing Mobile App and API Abuse

Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Threat Model Every Story - Practical Continuous Threat Modeling Work for Your Team

Explore continuous threat modeling for agile teams, focusing on collaborative methodologies and the PyTM open-source tool to enhance product security throughout development.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Cache Me If You Can - Messing with Web Caching

Explore web caching vulnerabilities including Web Cache Deception, Edge Side Include Injections, and Web Cache Poisoning. Learn detection techniques and mitigation strategies for these emerging threats in application security.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Automated Account Takeover - The Rise of Single Request Attacks

Explore the rise of single request attacks in account takeovers, their sophistication, and effective mitigation strategies through real-world case studies and expert insights.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Authentication as a Microservice - Portable Customer Identity Management

Explore microservice-based authentication, portable identity management, and JWT security. Learn advantages, pitfalls, and best practices for decoupling user data in modern applications.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk