Conference Talks

OWASP Foundation

Deserialization - What, How and Why Not

Explore insecure deserialization risks, vulnerabilities, and prevention techniques through code examples and live demos, focusing on Java but applicable to other languages.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

OWASP Foundation

A New Framework to Automate MSTG and MASVS in Your CI/CD Pipeline

Automate mobile app security testing using BDD and UI automation frameworks. Integrate OWASP MASVS/MSTG into CI/CD pipelines for faster, repeatable security checks at DevOps speed.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

OWASP Foundation

My Journey Through Building an Advanced Bot Detection Product

Explore the evolution of bot detection and management, focusing on fraudulent activities, detection techniques, and best practices for protecting e-commerce and finance websites.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

OWASP Foundation

The Anatomy of a Secure Web Application in Java Using Spring Security and Apache Fortress

Practical guidance on implementing secure Java web applications using Spring Security and Apache Fortress. Covers authentication, authorization, and confidentiality controls with hands-on demos and code examples.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

OWASP Foundation

SCORE Bot - Shift Left, at Scale!

Automated security code review tool for early detection of organization-specific vulnerabilities, integrated with GitHub PR process. Provides real-time feedback and actionable guidance for developers.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Value Driven Threat Modeling

Learn efficient, value-driven threat modeling techniques to embed secure design in products from the start. Discover how to integrate security into agile development and prioritize vulnerabilities effectively.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Making Security Approachable for Developers and Operators

Explore strategies to make security more accessible for developers and operators through APIs, secure-by-default platforms, and policy as code, enhancing overall security posture.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Exploiting Unknown Browsers and Objects

Discover hidden browser vulnerabilities with the Hackability Inspector, a new offensive toolkit for security researchers to explore and exploit unknown entities in embedded browsers.

• YouTube
• 39 minutes
• On-Demand
• Conference Talk

OWASP Foundation

What's New in TLS 1.3

Explore TLS 1.3's security enhancements, new protocol handshakes, and 0-RTT resumption. Learn about potential deployment pitfalls and how to avoid them in this comprehensive overview of the latest TLS version.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

OWASP Foundation

A Tour of API Underprotection

Explore API security threats, protection techniques, and advanced strategies. Learn about OAuth2, static API keys, mobile security, certificate pinning, and emerging technologies to strengthen your API security posture.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

OWASP Foundation

SecDevOps - Current Research and Best Practices

Explore current research and best practices in SecDevOps, covering static and dynamic analysis, security scaling, and infrastructure best practices for improved application security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

OWASP Foundation

We Come Bearing Gifts - Enabling Product Security with Culture and Cloud

Explore innovative approaches to product security, emphasizing automation, cloud deployment, and engineering enablement. Learn how Netflix balances security impact with developer productivity.

• YouTube
• 53 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Breaking Fraud and Bot Detection Solutions

Demystifying browser fingerprinting and user behavior tracking in fraud detection, exploring vulnerabilities, and demonstrating proof-of-concept attacks against these defense mechanisms.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Prove It! - Confronting Security With Data

Explore data-driven methods to measure and improve security capabilities in rapidly scaling businesses, focusing on quantitative strategies and decision analysis techniques.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

OWASP Foundation

Building a Secure DevOps Pipeline

Learn strategies to integrate security into DevOps, automate testing, and scale AppSec programs. Discover real-world examples of successful implementation across various companies, improving software development speed and security.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk