LASCON Talks & Presentations

LASCON

OAuth vs. SAML vs. OpenID Connect

Explore key identity federation protocols: OAuth, SAML, and OpenID Connect. Compare features, security levels, and use cases to make informed decisions for your application's single sign-on implementation.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

LASCON

SSL and the Future of Authenticity

Explore SSL's role in online security, challenges with certificate authorities, and innovative approaches to authentication in the digital age.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

LASCON

Fixing XSS with Content Security Policy

Explore Content Security Policy (CSP) as a defense against XSS attacks, comparing CSP 1.0 and 2.0, and learn implementation strategies for enhanced web application security.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

LASCON

Static Analysis Security Testing for Dummies and You

Demystifying Static Analysis Security Testing: Learn how SAST tools work, customize them for your needs, and integrate them into your development pipeline for improved application security.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

LASCON

Don't Touch Me That Way

Explore iOS fingerprint API security: correct usage, vulnerabilities, and potential attacks. Hands-on demo with code, tools, and test applications for mobile app developers and security professionals.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

LASCON

MQTT and CoAP - A Story about IoT Protocol Security

Explore MQTT and CoAP protocols for IoT, their security challenges, and mitigation strategies. Learn about common architectures, potential attacks, and best practices for secure implementation.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

LASCON

Automate Security Tests for APIs with Syntribos - An Open Source Security Scanner

Explore Syntribos, an open-source automated security scanner for RESTful APIs. Learn its design, configuration, and capabilities to detect vulnerabilities like SQL injection and DoS attacks efficiently.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

LASCON

Hack Wars - A New Hope

Jedi RAPst4r leads a fun-filled journey through the CyberUniverse, showcasing how to combat cyber threats with the help of allies. Learn about the "New Hope" in cybersecurity and its importance.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

LASCON

Ghosts of XSS Past, Present & Future

Explore the evolution of Cross-Site Scripting (XSS) vulnerabilities, their impact on web security, and strategies for mitigation in this comprehensive presentation by a leading industry expert.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

LASCON

Comparing WAF and RASP - Why?

Explore the differences and complementary roles of WAF and RASP in application security, understanding their strengths and limitations for comprehensive protection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

LASCON

API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale

Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

LASCON

Privacy Impact Assessments - How Much Privacy Is Enough?

Explore privacy impact assessments, their methodologies, and how they differ from security risk assessments. Learn to model and measure privacy impacts for effective Privacy by Design implementation.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

LASCON

Your Frontier Defense - Understanding Web Application Firewalls

Explore WAF options, features, and challenges across cloud providers and self-managed solutions for enhanced web application security and defense-in-depth strategies.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

LASCON

Doing This One Crazy Thing Will Change Your AppSec Program Forever

Discover how to revolutionize your AppSec program through effective communication, prioritization, and innovative strategies for securing software development.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

LASCON

Developing and Managing an OWASP Project - Projects 101

Learn to create, manage, and grow an OWASP project. Explore naming, sponsorship, levels, services, and resources for successful open-source security initiatives.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk