Global AppSec San Francisco 2024
57 talks · 2024 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- 5 Steps to VEX Success: Managing the End-to-End Workflow - Cortez Frazier Jr. 2024
- AI Code Generation - Benefits, Risks and Mitigation Controls - Aruneesh Salhotra 2024
- AI Goat: A Damn Vulnerable AI Infrastructure - Ofir Yakobi & Shir Sadon 2024
- AI Under the Hood: Unmasking Hidden Threats - Dr. Nitish M. Uplavikar 2024
- AppSec Meets Project Management: Hacking the Frameworks for Secure Software - Stefan Brätsch 2024
- Automatic application hardening by leveraging container runtime behavior analysis - Amit Schendel 2024
- Bridging Security & Privacy Standards: Harnessing OpenCRE for Effective Mapping - Dimitar Raichev 2024
- Businesses Run On Risk And Debt: Why Communicating Security Risk Is Hard - Dwayne McDaniel 2024
- Don’t Make This Mistake: Painful Learnings of Applying AI in Security - Eitan Worcel 2024
- Escaping Vulnerability Hell: Bridging the Gap Between Developers and Security Teams - Ahmad Sadeddin 2024
- GraphQL Exploitation: Secondary Context Attacks and Business Logic - Willis Vandevanter 2024
- Hackuracy: Boosting AST accuracy through hacking - Andres Roldan 2024
- Hidden Chains: Revealing High-Impact Bugs from Bounty submissions - Vinay & Murali 2024
- How Three Threat Modelers Can Influence an Entire Organization - Léandre Forget-B., Laurent Bouchard 2024
- How to get developers to want to adopt AppSec - Matan Rabi 2024
- I Know What You Did Last Summer: Lessons Learned from Privacy Breaches and Scandals - Dr. Kim Wuyts 2024
- Kernel Alchemy: Crafting Mobile Kernel Code to Evade Modern RASP Protections - Subho Halder 2024
- Keynote: Navigating the Intersection of Technology, Security, and Trust - Reeny Sondhi 2024
- Keynote: Red, Blue, and Purple AI - Jason Haddix 2024
- Keynote: Think Like a Hacker - Ted Harrington 2024
- Keynote: Thriving in the Age of AI - Aanchal Gupta 2024
- Learning from Past Security Breaches: Strengthening AppSec Efforts and Focus - Jon McCoy 2024
- Learning to build an effective security design review program - Felix Matenaar, Ari Fay 2024
- Living off Microsoft Copilot - Michael Bargury 2024
- Maturing Your Application Security Program with ASVS-Driven Development - Aram Hovsepyan 2024
- Millions Of Public Certificates Are Reusing Old Private Keys - Dylan Ayrey, Joseph Leon 2024
- Modernizing the Application Penetration Engagement and Reporting Lifecycle - Ryan Armstrong 2024
- Navigating the complex and rapidly evolving world of product and application security regulations 2024
- O My Data: OData Injection attack in Microsoft Power Platform and UiPath - Amichai Shulman 2024
- OWASP AI Exchange experts on the future of security for AI - Panel hosted by Chloé Messdaghi 2024
- OWASP Application Security Verification Standard (ASVS) - Shanni Prutchi, Ryan Armstrong 2024
- OWASP Coraza - Web Application Firewall - Juan Pablo Tosso 2024
- OWASP DefectDojo - Matt Tesauro 2024
- OWASP DevSecOps Maturity Model (DSOMM) - Timo Pagel 2024
- OWASP IoT Security Testing Guide (ISTG) - Aaron Guzman 2024
- OWASP JuiceShop - Bjoern Kimminich 2024
- OWASP Mobile Application Security (MAS) - Sven Schleier, Carlos Holguera 2024
- OWASP Nettacker - Arkadii Yakovets, Sam Stepanyan 2024
- OWASP Serverless Top 10 - David Melamed, Aruneesh Salhotra 2024
- OWASP Software Assurance Maturity Model (SAMM) - Aram Hovsepyan, Sebastien Deleersnyder 2024
- OWASP Top 10 for Large Language Models: Project Update - Steve Wilson, Scott Clinton 2024
- OWASP Top 10 Risks for Open Source Software - George Apostolopoulos 2024
- OWASP: The Next 25 years - Andrew van der Stock 2024
- Pay the Maintainers: xz utils Hack Highlights the Dangers of OSS Maintainer Burnout - Matthew Arnow 2024
- Practical Software Supply Chain Security Solutions - Robert Marion 2024
- Running Your Application Security Program Like a Marathon - Derek Fang 2024
- Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail - Yaniv Nizry 2024
- Self-Discovering API Key Permissions and Resources - Joseph Leon, Dylan Ayrey 2024
- Slack’s Vulnerability Aggregator: manage vulnerabilities at scale - Atul Gaikwad, Nicholas Lin 2024
- Striding Your Way to LINDDUN: Threat Modeling for Privacy - Shanni Prutchi, Chris Bush 2024
- The Broken State of DevSecOps and Its Maturity Model - Eitan Worcel, Dustin Lehr 2024
- The Container Escape Room: An Exploration of Container Escapes - Amit Schendel 2024
- The Missing Link - How we collect and leverage SBOMs - Cassie Crossley 2024
- Threat Modeling in the Age of AI - Susanna Cox 2024
- Under the Radar: How we found 0-days in the Build Pipeline of OSS Packages - François Proulx 2024
- Web Security Experts: Are you overlooking WebRTC vulnerabilities? - Sandro Gauci 2024
- Who Hurt You? Earning the trust of developers - Tanya Janca 2024