Global AppSec US 2021 Virtual
55 talks · 2021 · indexed by Breach Arc Archive. Links open each talk on YouTube.
Browse with filters →- 600 apps in 60 days: Our journey to uncover vulnerable dependencies at scale with ... - Frank Liauw 2021
- All your Ether are belong to us (a.k.a Hacking Ethereum-based DApps) - Luis Quispe Gonzales 2021
- Analyzing Google’s SLSA Framework for Securing Software Supply Chains - Ronen Slavin 2021
- Application Security Playbook for Business - Karthik Krishnamo 2021
- Application Threat Modeling Implementation Tips and Tricks - Mohamed Alfateh 2021
- Are you safe from OWASP #11? - Matt Tesauro 2021
- Automated Serverless Security Testing: Delivering secure apps continuously - Tal Melamed 2021
- Automating Architectural Risk Analysis with the Open Threat Model format - Fraser Scott 2021
- Azure Vulnerability Testbed (AzGOAT) - Akriti Srivastava 2021
- Bots have gone phishing, but all they get is the boot - Pedro Fortuna & Jasvir Nagra 2021
- Building Security Champions - Tanya Janca 2021
- Changed Responsibilities in Modern Development Practices - Martin Knobloch 2021
- Cluster Wrangling: How to make Kubernetes clusters secure and usable - Rory McCune 2021
- Container Security: It’s All About the Supply Chain - Michele Chubirka 2021
- Data at Rest Encryption Going Beyond the Basics to Address Modern Attacks - Chuck Willis & Wias Issa 2021
- Data-Driven AppSec Champions Programs – Benchmarking Your Program with Numbers - John Dickson 2021
- Demystifying the Digital Pandemic - Greeshma M R & Adarsh Nair 2021
- Ending Injection Vulnerabilities - Craig Francis 2021
- Exploiting web messaging implementations - Barak Tawily 2021
- Flipping the script on application security - Isaac Cohen 2021
- Harmonizing the OWASP API and Application Top 10 Lists - Joe Schottman 2021
- How Do They Get In?! Understanding the API Attack Vector - Michael Isbitski 2021
- How hackers can breach your C.I / C.D systems - Daniel Garcia & César Gallego 2021
- How to build a security mindset - Anna Lezhikova 2021
- How to Thwart Malicious Automation and Kick Bot Butt for $0 - Randy Gingeleski 2021
- How to Use Your Vulnerabilities to Train Your Developers on Security - Jared Ablon 2021
- Insiders Guide to Mobile AppSec with Latest OWASP MASVS - Brendan Hann 2021
- Keynote: 25 Years in AppSec: Looking Back, Looking Forward - Adam Shostack 2021
- Keynote: Data is a new security boundary - Anastasiia Voitova 2021
- Keynote: Request Forgery on the Web - SSRF, CSRF and Clickjacking - Jim Manico 2021
- Keynote: We Deserve Rights - Chloé Messdaghi 2021
- Leave It To The Machines - Yuval Schhory 2021
- Magecart - The Rising Threat to e-commerce Websites - Shrutirupa Banerjiee 2021
- Metabadger: Automating IMDS Protection at Scale in AWS - Ashish Patel 2021
- Normalizing AppSec Issues for Contextual Risk-Based Prioritization at Enterprise Scale - Moshe Zioni 2021
- Outside the box: pwning IoT devices through their applications - Alexei Kojenov 2021
- OWASP cautions against “insufficient logging & monitoring.” What does sufficient l...- Rob Dickinson 2021
- OWASP ESAPI – A Retrospective: The Good, the Bad, & the Ugly - Kevin Wall 2021
- OWASP Leaders Meeting 2021
- OWASP Open Application Security Curriculum - Adrian Winckles 2021
- OWASP ZAP & DeepFactor Continuous AppSec Observability: Made For Each Other! - Kiran Kamity 2021
- Practical Threat Modeling for real-world and Cloud Situations in our hybrid and W... - Uma Rajagopal 2021
- Purple Teaming with OWASP PurpleTeam - Kim Carter 2021
- Roadblocks for CSP and Where to Find Them - Sebastian Roth 2021
- SBOM SmackDown: Conquer dragons in the shadows with OWASP CycloneDX - Steve Springett 2021
- Scaling Security through Context-Based Security Asses... - Andrew Lien, Sanjeev Reddy & Teja Myneedu 2021
- Security Design Anti-Patterns – Creating Awareness to Limit Security Debt - Joern Freydank 2021
- Security Observability 101: Thinking Inside the Box! - Jeff Williams 2021
- Traceable AI - Dan Gordon 2021
- Web Application Honeypot Threat Intelligence - Adrian Winckles 2021
- We’re not in HTTP anymore: Investigating WebSocket Server Security - Erik Elbieh 2021
- Who’s in control: Human or Machine? - David Senecal & Luke Stork 2021
- Why checking your infrastructure-as-code for misconfigurations is not enough – How ... - Aakash Shah 2021
- Why SecDevOps is the new way in Cybersecurity? - Saman Fatima 2021
- Why security fails, and how we can solve for it - Richard Ford 2021