LASCON

267 talks · 2010–2023 · indexed by Breach Arc Archive. Links open each talk on YouTube.

Browse with filters →

Daniel Shugrue - OWASP MASVS and Threats to Mobile Apps in 2023 2023
Invited - Theresa Lanowitz - 2023 AT&T Cybersecurity Insights Report: Edge Ecosystem 2023
Andrew Hoog - 525,600 assessments later - top mobile app risks since 2022 2022
2019 - "On the Internet, nobody knows you're a dog": Revisiting the meme after 25 years 2019
2019 - A DevOps View of AppSec 2019
2019 - A Stratagem on Strategy: Rolling Testing into Product Testing 2019
2019 - Achieve AI-powered API Privacy using Open Source 2019
2019 - Application Logging in the Era of GDPR 2019
2019 - Assessing Maturity: OpenSAMM and BSIMM 2019
2019 - Baited Canaries - Monitoring attackers with active beacons 2019
2019 - Being Powerful While Powerless: Elevating Security by Leading Without Authority 2019
2019 - Breaking Into Red Teaming 2019
2019 - Choosing the Right Static Code Analyzers Based on Hard Data 2019
2019 - Cloud Security At Scale: Managing the Chaos 2019
2019 - Cloudy with a chance of Persistence 2019
2019 - Detect Insider Threats Using Blockchains 2019
2019 - Do Certain Types of Developers or Teams Write More Secure Code? 2019
2019 - Face Recognition & Privacy 2019
2019 - How to Build an Effective Malware Protection Architecture for File Uploads in Modern Web Apps 2019
2019 - How to Secure a nodejs Application End-to-End 2019
2019 - Invited Speaker - Josh Sokol 2019
2019 - Keynote: John Bambenek 2019
2019 - Keynote: Purple is the new black: Modern Approaches to Application Security 2019
2019 - Kubernetes Ingress-Nginx Security from Beginner to Expert 2019
2019 - Learning the Power of the “Not My Responsibility” Mindset 2019
2019 - Living in AppSec [Promised|Fantasy|Wonder]land 2019
2019 - Lost in Translation: Communicating Outside of Security 2019
2019 - Micro-services Challenges - Istio to the Rescue 2019
2019 - NetFlow? Where We're Going, We Don't Need... NetFlow 2019
2019 - New age cloud security - How to build secure multi-cloud applications and still sleep well.. 2019
2019 - Nifty Network Discovery 2019
2019 - Offensive Threat Models Against the Supply Chain 2019
2019 - OWASP Top 10 - Part 1 2019
2019 - OWASP Top 10 - Part 2 2019
2019 - Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol 2019
2019 - Running FaaS with Scissors 2019
2019 - Securability - Shannon Leitz 2019
2019 - Securing Modern API and Microservice Based Applications by Design. 2019
2019 - Security Code Analysis is for Everyone 2019
2019 - Security Instrumentation Is the Future of All Software 2019
2019 - Security Management 101: Practical Techniques They Should’ve Taught You 2019
2019 - Sexy Mobile App Attacks by Example 2019
2019 - Soft Skills Panel 2019
2019 - The A's, B's, and Four C's of Testing Cloud-Native Applications 2019
2019 - The Battle to Address Mobile in the Endpoint Security Space 2019
2019 - The End of the AppSec Team 2019
2019 - The Hacker Hippocampus: Meet your brain on games 2019
2019 - Threat Modelling Stories from the Trenches 2019
2019 - Thwarting Intruders with Ever Morphing Infrastructure 2019
2018 - The DevSecOps Builders Guide to the CI/CD PIPELINE - James Wickett 2018
2018 - Eisenhower and the Internet 2018
2018 - How to Assess the Maturity of your Security Program 2018
2018 - Security Testing: Is Automation Failing US ? : Heather Hinton 2018
2018 - Adapting Your AppSec - Brian Glas 2018
2018 - Be Prepared - Things you can do today for the breach you hope never comes 2018
2018 - Bridging GDPR from your Application to your Cloud 2018
2018 - Bridging GDPR from your Application to your Cloud 2018
2018 - Building An AppSec Program From The Ground Up: An Honest Retrospective 2018
2018 - Building Products People Trust: Designing Privacy, Consent, & Security into Your Products 2018
2018 - Conducting Table Top Exercises to Get Your Team Battle Ready - Josh Sokol 2018
2018 - Cryptography may or may not protect you - how it is used matters 2018
2018 - Data Protection at Scale 2018
2018 - Denial of Trust - The New Attacks - Wendy Nather 2018
2018 - DevSecOps without DevOps is Just Security 2018
2018 - Don't @ Me - Hunting Twitter Bots at Scale 2018
2018 - Empathy & Vulnerability in SecOps 2018
2018 - Evolving Your Security Mindset to Embrace DevSecOps 2018
2018 - How To Kick Butt in InfoSec Blogging! - Kate Brew 2018
2018 - It takes a village to get security right: Building collaborative IAM solutions 2018
2018 - Keynote - Speed with confidence - Shannon Lietz 2018
2018 - Keynote: Jayson Street 2018
2018 - Making Continuous Security a Reality with OWASP's AppSec Pipeline 2018
2018 - Microservices Security Landscape - Prabath Siriwardena 2018
2018 - ML-Based Detection Engine of Device/Network Attacks for IIOT Gateway 2018
2018 - Orchestrating Security Tools with AWS Step Functions 2018
2018 - Pentesting for Developers 2018
2018 - Poking Holes in the Cloud: Auditing AWS Security 2018
2018 - Practical DevSecOps – the simple free pipeline anyone can create - Jeff Williams 2018
2018 - Red Team\Pen Testing Panel Discussion 2018
2018 - Rethinking Role-Based Security Education - Kat Sweet 2018
2018 - Running at Light Speed: Cloud Native Security Patterns 2018
2018 - Secure Configuration in the Cloud 2018
2018 - Securing Legacy Applications 2018
2018 - Securing the Future of TLS - What's new in TLS 1.3 2018
2018 - SEOWNING The Internet Part 2- Robert Hansen 2018
2018 - The FaaS and the Curious 2018
2018 - The Mitre ATT&CK Framework is for all of us, and it is time to pay attention to it 2018
2018 - The White Hat’s Advantage: Open-source OWASP tools to aid in penetration testing coverage 2018
2018 - Threat Modeling for IoT Systems 2018
2018 - Vulnerability Management: You're doing it wrong 2018
2018 - Year[0]: AppSec at a Startup - Leif Dreizler 2018
LASCON 2018 - OWASP Top-10 Training - Part 1 2018
2017 - A Wake-Up Call - Information Sec. for Non-Profits, Foundations, and Charities - Kelley Misata 2017
2017 - Abusing Normality: Data Exfiltration in Plain Site 2017
2017 - AppSec Pipelines and Event-based Sec.: Moving beyond a traditional sec. test. - Matt Tesauro 2017
2017 - Architecting for Security in the Cloud - Josh Sokol 2017
2017 - Are you ready for my call? Responsible Disclosure Preparedness - Jason Kent 2017
2017 - Attack Vectors in Biometric Recognition Systems - Clare Nelson 2017
2017 - Attackers have the first mover advantage. Lets close that gap. - Brian Fox 2017
2017 - Breaking into Security - Tommy Dew, Gisela Hinojosa 2017
2017 - Climbing the PacketFence 2017
2017 - Cloud Ops MasterClass: Lessons learned from cloud automation - Michael Osburn, Nathan Wallace 2017
2017 - Core Rule Set for the Masses: Lessons from taming ModSec Rules at Massive Scale - Tin Zaw 2017
2017 - Demystifying the Ransomware and IoT Threat - Christopher Elisan 2017
2017 - From Zero to Zero-Trust: Lessons Learned Building a BeyondCorp SSH Proxy - James Barclay 2017
2017 - How to Create and Cultivate Community within the Cybersecurity Industry - Jessica Patterson 2017
2017 - How to put Sec in Devops - Igor Matlin 2017
2017 - Improving dynamic vulnerability scanners with static code analysis - Caleb Coffie 2017
2017 - Information Security Risk Assessment (ISRA): Lessons from the Front Lines - Karen Lu 2017
2017 - Invited Speaker: Chris Roberts 2017
2017 - IoT and the Security of That Mobile App - Mark Loveless 2017
2017 - IOT Assimilation: Resistance is Futile - Mark Szewczul 2017
2017 - It Was Broken When It Got Here! Security in your Software Procurement Process - Kevin Dunn 2017
2017 - Keynote: Chris Nickerson 2017
2017 - Keynote: Georgia Weidman 2017
2017 - Layer 8 and Why People are the Most Important Security Tool 2017
2017 - Leveraging Social Engineering in physical security assessment - Snow 2017
2017 - Local Austin Security Groups 2017
2017 - Malware Clustering - Srivathsan Srinivasagopalan 2017
2017 - No one left behind : Security Defense through Gamification including CTFs - Kashish Mittal 2017
2017 - OWASP Top 10 @ LASCON 2017 [1/5] 2017
2017 - OWASP Top 10 @ LASCON 2017 [2/5] 2017
2017 - OWASP Top 10 @ LASCON 2017 [3/5] 2017
2017 - OWASP Top 10 @ LASCON 2017 [4/5] 2017
2017 - OWASP Top 10 @ LASCON 2017 [5/5] 2017
2017 - Pen Testing for Humans - Rajan Kapoor 2017
2017 - Phishing: It's Not Just for Pentesters - Joe Gray 2017
2017 - Realizing Software Sec. Maturity: The Growing Pains & Gains - Kelby Ludwig, Mark Stanislav 2017
2017 - Security Evaluation of Libraries 2017
2017 - Security for DevOps - Shannon Lietz 2017
2017 - Serverless security: A pragmatic primer for builders and defenders - James Wickett 2017
2017 - Startup Security: Making Everyone Happy - Michael McCabe, Brian Henderson 2017
2017 - Tangled Web: Defense in Deception - Herb Todd 2017
2017 - The Rest of the Story: Securing a Raspberry Pi Home Monitoring System - Laurel Marotta 2017
2017 - The Role of Empathy in Vulnerability Disclosure Practices for Software Vendors - Adam Goodman 2017
2017 - Threat Modeling For Secure Software Design 2017
2017 - Using Identity to Evolve Application Security - Kevin Paige 2017
2017 - Where we’re going… we won’t need passwords… - Matt Hajda 2017
2017 - Won't somebody please think of the data! - Sarah-Jane Madden 2017
2017 - Your Security Tools are Just a Stop-Gap to Secure DevOps - Kevin Fealey 2017
2016 - OWASP Top 10 Free Training - LASCON 2016 [1/4] 2016
2016 - OWASP Top 10 Free Training - LASCON 2016 [2/4] 2016
2016 - OWASP Top 10 Free Training - LASCON 2016 [3/4] 2016
2016 - OWASP Top 10 Free Training - LASCON 2016 [4/4] 2016
2015 - Keynote: Jack Daniel 2015
2015 - Keynote: Pete Cheslock 2015
2015 - Rugged Software Engineering 2015
2015 - Security for Non-Unicorns 2015
2013 - Keynote: Blindspots with Robert Hansen 2013
2013 - View this abstract in your browser - Phil Purviance 2013
2013 - 5 Proven Success Strategies for your Software Security Program - Bankim Tejani 2013
2013 - Big Data, Little Security – Practical Steps for securing Big Data - Manoj Tripathi 2013
2013 - Cloud Keep - Protect your Secrets at Scale - Jarret Raim, Matt Tesauro 2013
2013 - Convincing Your Mgmt., Your Peers, and Yourself That Risk Mgmt. Doesn't Suck - Josh Sokol 2013
2013 - DDOS DOS Attack Classification per Attack Target and Attack Vector - Pez Zivic 2013
2013 - Do you have a Scanner, or a Scanning Program - Dan Cornell 2013
2013 - Drawing the map - Outlining Android permissions mechanism - Andrew Reiter 2013
2013 - Enforcing Authorization with Cryptography - Amit Sethi 2013
2013 - From Gates to Guardrails - Alternate Approaches to Product Security - Jason Chan 2013
2013 - Hacking NETC# Applications The Black Artsv3 - Jon Mccoy 2013
2013 - Heading Off Trouble - Securing Your Web App. with HTTP Headers and X Headers - Kevin Babcock 2013
2013 - How Malware Uses and Abuses Your Software - Michael Gough, Ian Robertson 2013
2013 - How overlay networks can make public clouds your global WAN network - Ryan Koop 2013
2013 - Ice Cream 'sudo make me a' Sandwich - Max Sobell 2013
2013 - iOSApps reverse #= iPwn Apps -Mano 'dash4rk' Paul 2013
2013 - Keynote: The Origins of Insecurity with Nick Galbreath 2013
2013 - Malware Automation - Christopher Elisan 2013
2013 - Million Browser Botnet - Matt Johansen 2013
2013 - Minding The Gap - Secure PhoneGap Apps - Jack Mannino, Jason Haddix 2013
2013 - Mobile AppSec - Development and Alphabet Soup - David Lindner 2013
2013 - No More Monkey Business Quality Assurance in Penetration Testing - Aaron Estes 2013
2013 - OWASP Top Ten Proactive Controls - Jim Manico 2013
2013 - Penetration Testing - The Other Stuff - David Hughes 2013
2013 - Practical PKI - Steven Bernstein 2013
2013 - Railsgoat - Rails attack and defense - Ken Johnson, Mike McCabe 2013
2013 - Revenge of the Geeks Hacking Fantasy Sports Sites - Dan Kuykendall 2013
2013 - Riding the Magical Code Injection Rainbow Daniel Crowley 2013
2013 - Rugged Driven Development with Gauntlt - James Wickett 2013
2013 - Securing Redis with Sedona - Will Urbanski 2013
2013 - Software and Supply Chain Assurance SSCA - Joe Jarzombek 2013
2013 - Speed Debates! - Matt Tesauro,Nick Galbreath,Robert Hansen,Jim Manico,HD Moore,Wendy Nather 2013
2013 - Stalking a City for Fun and Frivolity - Brendan O'Connor 2013
2013 - Stupid webappsec Tricks - Zane Lackey 2013
2013 - The Real Cost of Security - Wendy Nather 2013
2013 - User Auth for Winners, how to get it right the first time! - Karthik Gaekwad 2013
2013 - Vulnerability and Threat Management How Can We close the Gaps - Peter Perfetti 2013
2013 - We are the Cavalry - Why it has to be us & why now - Adam Brand 2013
2013 - Why CloudHSM can Revolutionzie AWS -Todd Cignetti, Oleg Gryb 2013
2012 - Recap and Looking Ahead to the Next ten Years and Appsec USA 2012 2012
2012 - Top Ten Risks with Cloud That Will Keep You Awake at Night with Shankar B. Chebrolu 2012
2012 - You're Not Done Yet-Turning Securable Apps into Secure Installs using SCAP - Charles Schmi 2012
2012 - An Introduction to ZAP, The OWASP Zed Attack Proxy with Simon Bennetts 2012
2012 - Android Security, or this is not the kind of 'open' I meant - Mike Park, Trustwave SpiderLabs 2012
2012 - Application Security & User Experience with Alex Smolen 2012
2012 - Application Security Advisory Board SDLC Panel Fuchsberger, Kumar, Tychansky and Moretti 2012
2012 - Application Security Debt and Application Interest Rates with Chris Wysopal, Veracode 2012
2012 - AppSec Inception Exploiting Software Culture with Jeff Williams, Aspect Security, CEO 2012
2012 - Behavioral Security Modeling Eliminating Vulnerabilities by Building Predictable Systems 2012
2012 - Brakeman & Jenkins-The Duo Detects Defects in Ruby on Rails Code w/ Justin Collins & Tin Zaw 2012
2012 - Cloud Sec 12 Step with Adrian Lane, Securosis, LLC 2012
2012 - Community - The Killer App with Mark Curphey, OWASP 2012
2012 - Emerging Threats in Mobile Computing with Adam Meyers SRA International 2012
2012 - Enterprise Security API ESAPI 2 0 Crypto Changes with Kevin Wall & the OWASP Project Portal 2012
2012 - Enterprise Security API ESAPI 2 0 Crypto Changes with Kevin Wall, ESAPI Project co owner 2012
2012 - Ghosts of XSS Past, Present & Future with Jim Manico, WhiteHat Security 2012
2012 - Gray, the New Black, Gray Box Vulnerability Testing with Brian Chess, Ph D 2012
2012 - Hacking NET Applications, The Black Arts with Jon McCoy, DigitalBodyGuard.com 2012
2012 - Hacking and Defending iPhone Apps: Keven Stadmeyer & Garrett Held, Trustwave SpiderLabs 2012
2012 - How NOT to Implement Cryptography for the OWASP Top 10 Reloaded with Anthony J Stieber 2012
2012 - How To Recruit Spies on the Internet with Ira Winkler, CISSP 2012
2012 - Implementing AppSensor in ModSecurity with Ryan Barnett, Trustwave SpiderLabs 2012
2012 - Improve your SDLC with CAPEC and CWE with Ryan Stinson, KCG 2012
2012 - Keeping Up with the Web Application Security with Ganesh Devarajan & Todd Redfoot 2012
2012 - Keynote: SSL And The Future of Authenticity with Moxie Marlinspike 2012
2012 - Lesson Learned Building Secure ASP NET Applications with Tom Fischer 2012
2012 - Messaging Security Using GlassFish & Open Message Queue with Srini Penchikala 2012
2012 - Mobile Web Services with Gunnar Peterson 2012
2012 - Next Gen Web Attacks - HTML 5, DOM L3 and XHR L2 with Shreeraj Shah, Blueinfy Solutions Pvt 2012
2012 - OWASP Cheat Sheet Series w/ Michael Coates & OWASP Codes of Conduct Project w/ Colin Watson 2012
2012 - OWASP Foundation Board Discussion - Williams, Brennan, Keary, Tesauro, Wichers and Coates 2012
2012 - OWASP Top 10 Mobile Risks with Jack Mannino, Mike Zusman & Zach Lanier 2012
2012 - Panel Discussion - Making it in Information Security & Application Security 2012
2012 - Principles of Patrolling, Applying Ranger School Lessons to Info Sec with Patrick Tatro 2012
2012 - Pwning Intranet with HTML 5 with Javier Marcos de Prado & Juan Galiana Lara, IBM 2012
2012 - Secure Development Considerations for Cloud Virtual Environments with Andrew Murren 2012
2012 - Secure Programming Support in IDE with Bill Chu and Jing Xie 2012
2012 - Security Evolution Bug Bounty Programs for Web Applications with Michael Coates, Mozilla 2012
2012 - Simplifying Threat Modeling with Mike Ware, Cigital 2012
2012 - Six Key Metrics A Look at the Future of AppSec with Arian Evans 2012
2012 - Software Assurance Automation Throughout the Lifecycle with Richard Struse 2012
2012 - Software Security Is OK Good Enough with John B Dickson, CISSP 2012
2012 - Speeding up Security Testing Panel Cruz, Eng, Hoff, Meyer, Steven & Fay 2012
2012 - STAAF: An Efficient Distributed Framework for Performing Large Scale Android App. Analysis 2012
2012 - Sticking to the Facts Scientific Study of Static Analysis Tools with Britton Willis 2012
2012 - Testing from the Cloud Is the sky falling with Matt Tesauro, OWASP Foundation Board Member 2012
2012 - The Good Hacker Dismantling Web Malware with Aditya K Sood & Richard J Enbody 2012
2012 - The Self Healing Cloud: Protecting Apps and Infrastructure with Automated Virtual Patching 2012
2012 - Threat Modeling Cloud Apps: What you Don't Know Will Hurt You with Scott Matsumoto, Cigital 2012
2012 - Web Application Security Payloads with Andres Riancho, RAPID 7 2012
2012 - When Zombies Attack A Tracking Love Story with Ashkan Soltani & Gerrit Padgham 2012
2012 - Why Do Developers Make Dangerous Software Errors with Michele Moss & Nadya Bartol 2012
2011 - Automated vs. Manual Security: You can't scan for The Stupid - charles and david 2011
2011 - Beautiful Payment Systems with OAuth - Tom Brown 2011
2011 - Building Effective Cyber Security and Risk Management Programs - Dr.ron ross 2011
2011 - Common Tools for Red Team Testing: Ryan Jones and Charles Henderson 2011
2011 - Ghosts of XSS Past, Present and Future - Jim Manico 2011
2011 - Hacking (and Defending) iPhone Application - Kevin Stadmeyer, Garrett Held 2011
2011 - Hiding From Big Brother Using Distributed Steganography- Josh Sokol and orlando Barrera II 2011
2011 - How to build a secure login - Ben Broussard 2011
2011 - How to influence a Developer to write secure code in 10 minutes 2011
2011 - Infosec In The New World Order: Rugged DevOps And More ... - Gene Kim 2011
2011 - Keynote: Matt Tesauro 2011
2011 - Network Attack Collabration: Raphel Mudge 2011
2011 - Obfuscation in Javascript- herrera 2011
2011 - opensamm in the Real World- Philip J.Beyer, Scott Stevens 2011
2011 - PCI, CWE topp 25 and OWASP top 10 bringing all together - Nishi Kumar, Keith Turpin 2011
2011 - Reversing Web Applications - Andrew Wilson 2011
2011 - SDL- A History -Michael Howard 2011
2011 - Social Engineering - David Hughes 2011
2011 - Software Assurance- Joe Jarzombek 2011
2011 - You're Going to Need a Bigger Shovel: Rafa Los 2011
2010 - Everything Useful I Learned About Software Security - Michael Howard 2010
2010 - How I Met Your Girlfriend - Samy Kamkar 2010
2010 - HTTPS Can Byte Me - Robert 'RSnake' Hansen and Josh Sokol 2010
2010 - Keynote: Why Does Bad Software Happen to Good People - Matt Tesauro 2010
2010 - Mitigating Business Risks with Application Security - Joe Jarzombek 2010
2010 - Speed Debates 2010