OWASP Foundation

649 talks · 2013–2026 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• 2026 Board of Directors Candidate Town Hall 2026
• OWASP AppSec Days Portugal 2026 Closing Session 2026
• OWASP Board - August 2026 Full Financial Review 2026
• OWASP Board Finance Summary - July 2026 2026
• OWASP Board Finance Summary Full - July 2026 2026
• OWASP Board of Directors - February 2026 2026
• OWASP Board of Directors - January 2026 2026
• OWASP Board of Directors - July 2026 Public Board Meeting 2026
• OWASP Board of Directors 2026 Officer Elections 2026
• OWASP Finance - August 2026 Summary Deck Presentation 2026
• OWASP Finance - Full Summary Readout May 2026 2026
• OWASP Finance - Slide Deck Summary May 2026 2026
• OWASP Global Board of Directors - April 2026 2026
• OWASP Global Board of Directors - June 2026 Public Meeting 2026
• OWASP Global Board of Directors - March 2026 Public Meeting 2026
• OWASP Global Board of Directors - May 2026 Public Meeting 2026
• OWASP Global Board of Directors Meeting - September 2026 2026
• OWASP Global Board of Directors Public Board Meeting - August 2026 2026
• OWASP Leaders Town Hall - February 2026 2026
• OWASP Foundation - December 2025 Financials 2025
• OWASP Global AppSec EU 2025 Closing Ceremony 2025
• OWASP Global Board of Directors - December 2025 2025
• OWASP Global Board of Directors - November 2025 2025
• OWASP Global Board of Directors - October 2025 2025
• OWASP Global Board of Directors - September 2025 2025
• OWASP Global Board of Directors Meeting - April 2025 2025
• OWASP Global Board of Directors Meeting - August 2025 2025
• OWASP Global Board of Directors Meeting - February 2025 2025
• OWASP Global Board of Directors Meeting - January 2025 2025
• OWASP Global Board of Directors Meeting - July 2025 2025
• OWASP Global Board of Directors Meeting - June 2025 2025
• OWASP Global Board of Directors Meeting - March 2025 2025
• OWASP Global Board of Directors Meeting - May 2025 2025
• The OWASP Top Ten 2025 - Tanya Janca & Torsten Gigler 2025
• 202401 January 2024 Board Meeting 2024
• 202402 February 2024 Board Meeting 2024
• 202403 March 2024 Board Meeting 2024
• 202404 April 2024 Board Meeting 2024
• 202405 May 2024 Board Meeting 2024
• 202406 June 2024 Board Meeting 2024
• 202407 July 2024 Board Meeting 2024
• 202408 August 2024 Board Meeting 2024
• 20240926 September 2024 Board Meeting 2024
• 20241022 October 2024 Board Meeting 2024
• 20241126 November 2024 Board Meeting 2024
• 20241217 December 2024 Board Meeting 2024
• 202301 January 2023 Board Meeting 2023
• 202302 February 2023 Board Meeting 2023
• 202303 March 2023 Board Meeting 2023
• 202304 April 2023 Board Meeting 2023
• 202305 May 2023 Board Meeting 2023
• 202306 June 2023 Board Meeting 2023
• 202307 July 2023 Board Meeting 2023
• 202308 August 2023 Board meeting 2023
• 202309 September 2023 Board Meeting 2023
• 202310 October 2023 Board Meeting 2023
• 202311 November 2023 Board Meeting 2023
• 202312 December 2023 Board Meeting 2023
• 202201January 2022 Global Board Meeting 2022
• 202202 February 2022 Global Board Meeting 2022
• 202203 March 2022 Global Board Meeting 2022
• 202204 April 2022 Global Board Meeting 2022
• 202205 May 2022 Global Board Meeting 2022
• 202206 June 2022 Global Board Meeting 2022
• 202207 July 2022 Global Board Meeting 2022
• 202208 August 2022 Global Board Meeting 2022
• 202209 September 2022 Global Board Meeting 2022
• 202210 October 2022 Global Board Meeting 2022
• 202211 November 2022 Global Board Meeting 2022
• 202212 December 2022 Global Board Meeting 2022
• Member TownHall - Bylaws June 2022 2022
• 20201116 November 2021 Events Special Board Meeting 2021
• 202101 January 2021 Global Board Meeting 2021
• 202102 February 2021 Global Board Meeting 2021
• 202103 March 2021 Global Board Meeting 2021
• 202104 April 2021 Global Board Meeting 2021
• 202105 May 2021 Global Board Meeting 2021
• 202106 June 2021 Global Board Meeting 2021
• 202107 July 2021 Global Board Meeting 2021
• 202108 August 2021 Global Board Meeting 2021
• 202109 September 2021 Global Board Meeting 2021
• 202110 October 2021 Global Board Meeting 2021
• 202111 November 2021 Global Board Meeting 2021
• 202112 December 2021 Global Board Meeting 2021
• OWASP Standard Classification: OWASP Top 10 Privacy Risks 2021 - Florian Stahl 2021
• OWASP Waspy Awards 2021 Bjoern Kimminich 2021
• OWASP Waspy Awards 2021 Tanya Janca 2021
• The How and Why of the OWASP Top Ten 2021 - Brian Glas 2021
• Topics of Interest: An Attackers View on APAC's 2021 Three Major Breaches - Ric Campo 2021
• Waspy Awards 2021 - Zap Project 2021
• 202001 January 2020 Global Board Meeting 2020
• 202002 February 2020 Global Board Meeting 2020
• 202004 April 2020 Global Board Meeting 2020
• 202005 May 2020 Global Board Meeting 2020
• 202006 June 2020 Global Board Meeting 2020
• 202007 July 2020 Global Board Meeting 2020
• 202008 August 2020 Global Board Meeting 2020
• 202009 September 2020 Global Board Meeting 2020
• 202010 October 2020 Global Board Meeting 2020
• 202011 November 2020 Global Board Meeting 2020
• Magecart 2020 The New Face of XSS Ameet Naik & Ido Safruti 2020
• AppSec Global DC 2019 - Opening Remarks 2019
• AppSecCali 2019 - An Attacker's View of Serverless and GraphQL Apps - Abhay Bhargav 2019
• AppSecCali 2019 - (in)Secure Development - Why some product teams are great and others … aren’t... 2019
• AppSecCali 2019 - A Seat at the Table - Adam Shostack 2019
• AppSecCali 2019 - Authorization in Micro Services World Kubernetes, ISTIO and Open Policy Agent 2019
• AppSecCali 2019 - Automated Account Takeover: The Rise of Single Request Attacks 2019
• AppSecCali 2019 - A​ Pragmatic Approach for Internal Security Partnerships 2019
• AppSecCali 2019 - Behind the Scenes: Securing In-House Execution of Unsafe Third-Party Executables 2019
• AppSecCali 2019 - BoMs Away - Why Everyone Should Have a BoM - Steve Springett 2019
• AppSecCali 2019 - Browser fingerprints for a more secure web - Julien Sobrier & Ping Yan 2019
• AppSecCali 2019 - Cache Me If You Can: Messing with Web Caching 2019
• AppSecCali 2019 - Can Kubernetes Keep a Secret? - Omer Levi Hevroni 2019
• AppSecCali 2019 - CISO Panel: Baking Security Into the SDLC 2019
• AppSecCali 2019 - Cloud Forensics: Putting The Bits Back Together 2019
• AppSecCali 2019 - Contact Center Authentication - Kelley Robinson 2019
• AppSecCali 2019 - Cyber Insurance: A Primer for Infosec - Nicole Becher 2019
• AppSecCali 2019 - Detecting Credential Compromise in AWS - Will Bengtson 2019
• AppSecCali 2019 - Game On! Adding Privacy to Threat Modeling - Adam Shostack & Mark Vinkovits 2019
• AppSecCali 2019 - How to Start a Cyber War: Lessons from Brussels-EU Cyber Warfare Exercises 2019
• AppSecCali 2019 - INTERVIEW COLLEEN COOLIDGE SEGMENT 2019
• AppSecCali 2019 - INTERVIEW CONTRAST 2019
• AppSecCali 2019 - INTERVIEW MARTIN OWASP 2019
• AppSecCali 2019 - INTERVIEW NETSPARKER 2019
• AppSecCali 2019 - INTERVIEW RICHARD AND GUESTS 2019
• AppSecCali 2019 - It Depends... - Kristen Pascale & Tania Ward 2019
• AppSecCali 2019 - Lessons Learned from the DevSecOps Trenches (Panel) 2019
• AppSecCali 2019 - Leveraging Users' Engagement to Improve Account Security - Amine Kamel 2019
• AppSecCali 2019 - Netflix's Layered Approach to Reducing Risk of Credential Compromise 2019
• AppSecCali 2019 - Offensive Threat Models Against the Supply Chain - Tony UcedaVelez 2019
• AppSecCali 2019 - On the Frontlines: Securing a Major Cryptocurrency Exchange 2019
• AppSecCali 2019 - Open-source OWASP tools to aid in penetration testing coverage 2019
• AppSecCali 2019 - Pose a Threat: How Perceptual Analysis Helps Bug Hunters 2019
• AppSecCali 2019 - Preventing Mobile App and API Abuse - Skip Hovsmith 2019
• AppSecCali 2019 - Securing Third Party Applications at Scale - Ryan Flood & Prashanth Kannan 2019
• AppSecCali 2019 - Slack App Security: Securing your Workspaces from a Bot Uprising 2019
• AppSecCali 2019 - Startup security: Starting a security program at a startup - Evan Johnson 2019
• AppSecCali 2019 - The Art of Vulnerability Management 2019
• AppSecCali 2019 - The Call is Coming From Inside the House: Lessons in Securing Internal Apps 2019
• AppSecCali 2019 - Threat Model Every Story: Practical Continuous Threat Modeling Work for Your Team 2019
• AppSecCali 2019 - What's Happening in OWASP? - Richard Greenberg 2019
• AppSecCali 2019 Keynote - Fail, Learn, Fix - Bryan Payne 2019
• AppSecCali 2019 Keynote - How to Slay a Dragon - Adrienne Porter Felt 2019
• AppSecCali 2019 Keynote - Starting Strength for AppSec - Fredrick Lee 2019
• AppSecCali 2019 Keynote - The Unabridged History of Application Security - Jim Manico 2019
• AppSecCali 2019 Lightning Talk - Building Cloud-Native Security for Apps and APIs with NGINX 2019
• AppSecCali 2019 Lightning Talk - Creating Accessible Security Testing with ZAP 2019
• AppSecCali 2019 Lightning Talk - Endpoint Finder: A static analysis tool to find web endpoints 2019
• AppSecCali 2019 Lightning Talk - How to Lose a Container in 10 Minutes 2019
• AppSecCali 2019 Lightning Talk - Inducing Amnesia in Browsers: the Clear Site Data Header 2019
• AppSecCali 2019 Lightning Talk - Node.js and NPM Ecosystem: What are the Security Stakes? 2019
• AppSecCali 2019 Lightning Talk - Working with Developers for Fun and Progress - Leif Dreizler 2019
• AppSecCali 2019 Welcome Address - Richard Greenberg 2019
• OWASP Global AppSec Tel Aviv 2019 - Innovation Fair 2019
• (in)Security is eating the world - Michael Coates - AppSecUSA 2018 2018
• A new framework to automate MSTG and MASVS in your CI/CD pipeline - AppSecUSA 2018 2018
• APPSEC Cali 2018 - European Vacation: Leveraging GDPR for Security 2018
• APPSEC Cali 2018 - A Tour of API Underprotection 2018
• APPSEC Cali 2018 - Applied Deception Beyond the Honeypot: Moving Past 101 2018
• APPSEC Cali 2018 - Architecting for Security in the Cloud 2018
• APPSEC Cali 2018 - Authentication Without Authentication 2018
• APPSEC Cali 2018 - Breaking Fraud and Bot Detection Solutions 2018
• APPSEC Cali 2018 - Closing Keynote - A free, fair and open internet is a process, not a product. 2018
• APPSEC Cali 2018 - Closing Keynote - Digital Disease: How Healthcare Cybersecurity Challenges... 2018
• APPSEC Cali 2018 - Costs of Coding to Compliance 2018
• APPSEC Cali 2018 - Decrease Your Stress and Increase Your Reach with Appsec Champions 2018
• APPSEC Cali 2018 - DevOps Is Automation, DevSecOps Is People 2018
• APPSEC Cali 2018 - Edgeguard: Client-side DOM Security - detecting malice - An Open Framework 2018
• APPSEC Cali 2018 - How Privacy Violations, Fines and Economic Sanctions Create Darker Opportunities 2018
• APPSEC Cali 2018 - Hunter – Optimize your Pentesters Time 2018
• APPSEC Cali 2018 - Lessons From The Threat Modeling Trenches 2018
• APPSEC Cali 2018 - Leveraging Cloud SDNs to Solve OWASP Top Ten 2018
• APPSEC Cali 2018 - MarkDoom: How I Hacked Every Major IDE in 2 Weeks 2018
• APPSEC Cali 2018 - Opening Keynote - Flipping the script 2018
• APPSEC Cali 2018 - Opening Keynote: Prove It! Confronting Security With Data. 2018
• APPSEC Cali 2018 - OWASP Top 10 2018
• APPSEC Cali 2018 - Pack your Android: Everything you need to know about Android Boxing 2018
• APPSEC Cali 2018 - Prevention as a Business Strategy 2018
• APPSEC Cali 2018 - ReproNow - Save time Reproducing and Triaging Security Bugs 2018
• APPSEC Cali 2018 - Robots with Pentest Recipes 2018
• APPSEC Cali 2018 - SecDevOps: Current Research and Best Practices 2018
• APPSEC Cali 2018 - Security After Death -- Not your problem, or is it? 2018
• APPSEC Cali 2018 - Taking on the King: Killing Injection Vulnerabilities 2018
• APPSEC Cali 2018 - The Best Flaw Didn't Make Into Production 2018
• APPSEC Cali 2018 - The Bug Hunter's Methodology 2.0 2018
• APPSEC Cali 2018 - The Only Reason Security Really Matters for DevOps 2018
• APPSEC Cali 2018 - The Path Of DevOps Enlightenment For InfoSec 2018
• APPSEC Cali 2018 - Threat Modeling Panel 2018
• APPSEC Cali 2018 - Threat Modeling Toolkit 2018
• APPSEC Cali 2018 - Unpoisoned Fruit: Seeding Trust into a Growing World of Algorithmic Warfare 2018
• APPSEC Cali 2018 - We Come Bearing Gifts: Enabling Product Security with Culture and Cloud 2018
• APPSEC Cali 2018 - What's New in TLS 1.3 2018
• APPSEC Cali 2018 - Where, how, and why is SSL traffic on mobile getting intercepted? 2018
• APPSEC Cali 2018 - Women In Security Panel 2018
• APPSEC Cali 2018 -Predicting Random Numbers in Ethereum Smart Contracts 2018
• APPSEC Cali 2018 Seeing Through the Fog - Navigating the Security Landscape of a Cloud-First World 2018
• AppSec California 2018 Interview - Sascha Schleumer 2018
• AppSec EU 2018 Opening Remarks - Martin Knobloch 2018
• AppSecUSA 2018 Welcome Address by Karen Staley and Travis McPeak 2018
• Are we using Java Crypto API Securely ? - Mansi Sheth - AppSecUSA 2018 2018
• Battle Tested Application Security - Ty Sbano - AppSecUSA 2018 2018
• BeNeLux Day 2018: Fast Forwarding Mobile Security With The MSTG - Jeroen Willemsen 2018
• BeNeLux Day 2018: Juice Shop: OWASP's Most Broken Flagship - Björn Kimminich 2018
• BeNeLux Day 2018: Leaky Processors: Stealing Your Secrets With Foreshadow - Jo Van Bulck 2018
• BeNeLux Day 2018: Lessons From The Legion (OWASP BeNeLux Remix) - Nick Drage 2018
• BeNeLux Day 2018: OWASP Zap - David Scrobonia 2018
• BeNeLux Day 2018: Serverless Security And Functions-as-a-Service (FaaS) - Niels Tanis 2018
• BeNeLux Day 2018: Weaknesses In Our Voice Communications Network - Ralph Moonen 2018
• Breaking fraud & bot detection solutions - Mayank Dhiman - AppSecUSA 2018 2018
• Defensible Application Security for the Artificial Intelligence Era - Chenxi Wang - AppSecUSA 2018 2018
• Deserialization: what, how and why [not] - Alexei Kojenov - AppSecUSA 2018 2018
• Domino's Delivery of a Faster Response was No Standard Order - Michael Sheppard - AppSecUSA 2018 2018
• Ecosystem, Interoperability and Standards: IoT Security - AppSecUSA 2018 2018
• Empowering the Employee: Incident Response with a Security Bot - Jeremy Krach - AppSecUSA 2018 2018
• Exposing Security Flaws in Trading Technologies - Alejandro Hernandez - AppSecUSA 2018 2018
• Fixing Mobile AppSec - Sven Schleier - AppSecUSA 2018 2018
• Flying Above the Clouds: Securing Kubernetes - Jack Mannino - AppSecUSA 2018 2018
• How to get the best AppSec test of your life - Josh Grossman - AppSecUSA 2018 2018
• Human factors that influence secure software development - AppSecUSA 2018 2018
• Identity Theft: Attacks on SSO Systems - Kelby Ludwig - AppSecUSA 2018 2018
• Lessons from integrating third party library scanning in DevOps workflow - AppSecUSA 2018 2018
• Making Security Approachable for Developers and Operators - Armon Dadgar - AppSecUSA 2018 2018
• My journey through building an advanced bot detection product - David Senecal - AppSecUSA 2018 2018
• Open Source Security Tools for Kubernetes Applications - Michael Ducy - AppSecUSA 2018 2018
• OWASP AppSec EU 2018 Leaders Meeting 2018
• OWASP Leaders Workshop AppSecUSA 2018 - Part 1 2018
• OWASP Leaders Workshop AppSecUSA 2018 - Part 2 2018
• Pentesting Swift Application with OWASP iGoat - Swaroop Yermalkar - AppSecUSA 2018 2018
• Prevent Business Logic Attacks using Dynamic Instrumentation - Jean-Baptiste Aviat - AppSecUSA 2018 2018
• SCORE Bot: Shift Left, at Scale! - Vidhu Jayabalan - Laksh Raghavan - AppSecUSA 2018 2018
• Scratching the Surface of your CD? - Ofer Maor - AppSecUSA 2018 2018
• SDL at Scale: Growing Security Champions - Ryan O'Boyle - AppSecUSA 2018 2018
• Security as a Service: Work where You Engineers Live - AppSecUSA 2018 2018
• Security Culture Hacking: Disrupting the Security Status Quo - Chris Romeo - AppSecUSA 2018 2018
• Security Vulnerabilities in AI Assistant Based Applications - Abraham Kang - AppSecUSA 2018 2018
• Serverless Infections: Malware Just Found a New Home - Erez Yalon - AppSecUSA 2018 2018
• Single Page Applications: Is your design secure? - AppSecUSA 2018 2018
• Teach a man how to fish - Jeroen Willemsen - AppSecUSA 2018 2018
• Testing iOS Apps without Jailbreak in 2018 - Wojciech Reguła 2018
• Threat Model-as-Code - Abhay Bhargav - AppSecUSA 2018 2018
• Value Driven Threat Modeling - Avi Douglen - AppSecUSA 2018 2018
• Web application compromise mitigation with crypto anchoring - Jon Debonis - AppSecUSA 2018 2018
• A Static Tainting Analysis Method for Aspect-Oriented Programs - AppSecUSA 2017 2017
• An Agile Framework for Building GDPR Requirements into SDLC - AppSecUSA 2017 2017
• An Overview of API Underprotection - AppSecUSA 2017 2017
• Androsia: A tool for securing in memory sensitive data - AppSecUSA 2017 2017
• APPSEC CA 2017 A Hybrid Approach for Web App Penetration Testing - David Caissy 2017
• APPSEC CA 2017 Amit Sethi 2017
• APPSEC CA 2017 Arvind Mani 2017
• APPSEC CA 2017 Brent Johnson and Neil Matatall 2017
• APPSEC CA 2017 Caroline Wong 2017
• APPSEC CA 2017 Chenxi Wang 2017
• APPSEC CA 2017 Closing Keynote: The anatomy of modern deceptive technologies - Chris Roberts 2017
• APPSEC CA 2017 Dan Cornell 2017
• APPSEC CA 2017 Dan Kuykendall 2017
• APPSEC CA 2017 Daniel Miessler 2017
• APPSEC CA 2017 David Cuadrado and Santiago Kantorowicz 2017
• APPSEC CA 2017 Devdatta Akhawe and Emily Stark 2017
• APPSEC CA 2017 Dr. Zulkfikar Ramzan 2017
• APPSEC CA 2017 Ilya Nesterov 2017
• APPSEC CA 2017 INTERVIEW Chris Roberts 2017
• APPSEC CA 2017 INTERVIEW Dan Cornell 2017
• APPSEC CA 2017 INTERVIEW Jim Manico 2017
• APPSEC CA 2017 INTERVIEW Neil Matatall 2017
• APPSEC CA 2017 INTERVIEW Scott Helme 2017
• APPSEC CA 2017 INTERVIEW Scott Helme 2017
• APPSEC CA 2017 INTERVIEW Scott Jensen 2017
• APPSEC CA 2017 INTERVIEW Tom Brennan 2017
• APPSEC CA 2017 INTERVIEW Zane Lackey 2017
• APPSEC CA 2017 INTERVIEW - Gary McGraw 2017
• APPSEC CA 2017 INTERVIEW - Dan Kuykendall 2017
• APPSEC CA 2017 INTERVIEW - HP Fortify 2017
• APPSEC CA 2017 INTERVIEW - RIOT GAMES 2017
• APPSEC CA 2017 INTERVIEW Zulfikar Ramzan 2017
• APPSEC CA 2017 Jack Bicer 2017
• APPSEC CA 2017 James Wickett 2017
• APPSEC CA 2017 Jared Haight 2017
• APPSEC CA 2017 Jillian Karner 2017
• APPSEC CA 2017 Jim Manico 2017
• APPSEC CA 2017 Jim O'Leary 2017
• APPSEC CA 2017 Justin Mayer 2017
• APPSEC CA 2017 Ken Johnson 2017
• APPSEC CA 2017 Kevin Cardwell 2017
• APPSEC CA 2017 Kiran Shirali and Srinivasa Rao 2017
• APPSEC CA 2017 Marc Bütikofer 2017
• APPSEC CA 2017 Matt Tesauro 2017
• APPSEC CA 2017 Opening Keynote: Scaling a Software Security Initiative - Gary McGraw Ph.D 2017
• APPSEC CA 2017 Panel: Women in Security 2017
• APPSEC CA 2017 Patrick Albert and Tony Trummer 2017
• APPSEC CA 2017 Pedro Fortuna 2017
• APPSEC CA 2017 Rod Cope 2017
• APPSEC CA 2017 Roger Seagle 2017
• APPSEC CA 2017 Scott Jensen 2017
• APPSEC CA 2017 Sun Hwan Kim and Julien Sobrier 2017
• APPSEC CA 2017 Tin Zaw 2017
• APPSEC CA 2017 Tom Brennan 2017
• APPSEC CA 2017 Will Bengtson and Travis McPeak 2017
• APPSEC CA 2017 Yan 2017
• APPSEC CA 2017 Zane Lackey 2017
• APPSEC Cali 2017 - Marketing video 2017
• AppSecUSA 2017 Leaders Session 2017
• Automating TLS Configuration Verification - AppSecUSA 2017 2017
• Beyond End to End Encryption - AppSecUSA 2017 2017
• Beyond Takeover: Attacker’s in. Now what? - AppSecUSA 2017 2017
• Black-Box Approximate Taint Tracking by Utilizing Data Partitioning - AppSecUSA 2017 2017
• Bug Bounty Programs: Successfully Controlling Complexity and Perpetual Temptation - AppSecUSA 2017 2017
• Building a Secure DevOps Pipeline - AppSecUSA 2017 2017
• Building Secure ASP.NET Core MVC Applications - AppSecUSA 2017 2017
• Capture the Flag for Developers - AppSecUSA 2017 2017
• Cookie Security Myths and Misconceptions - David Johansson - AppSecUSA 2017 2017
• Core Rule Set for the Masses - AppSecUSA 2017 2017
• Crafting the next-generation Man-in-the-Browser Trojan - AppSecUSA 2017 2017
• Differences Between Web Application Scanning Tools when Scanning for XSS and SQLi - AppSecUSA 2017 2017
• Embedding GDPR into the SDLC - Steven Wierckx - AppSecUSA 2017 2017
• Enhancing Physical Perimeter Defense Using SDR - AppSecUSA 2017 2017
• Federated Login CSRF - AppSecUSA 2017 2017
• Friday the 13th: Attacking JSON - Alvaro Muñoz & Oleksandr Mirosh - AppSecUSA 2017 2017
• Handling of Security Requirements in Software Development Lifecycle - AppSecUSA 2017 2017
• How To Approach InfoSec Like a Fed(eral Auditor) - AppSecUSA 2017 2017
• How to detect CSRF vulnerability, reliably? - AppSecUSA 2017 2017
• How to stop worring about application Container security - AppSecUSA 2017 2017
• HUNT: Data Driven Web Hacking & Manual Testing - JP Villanueva - AppSecUSA 2017 2017
• iGoat: A Self Learning Tool for iOS App Pentesting and Security - AppSecUSA 2017 2017
• Juggling the Elephants: Making AppSec a Continuous Program - AppSecUSA 2017 2017
• Keynote - Runa Sandvik - Building a Culture of Security at The New York Times - AppSecUSA 2017 2017
• Keynote - Tony UcedaVelez - Fixing Threat Models with OWASP Efforts - AppSecUSA 2017 2017
• Leveraging Blockchain for Identity and Authentication in IoT is good for Security - AppSecUSA 2017 2017
• Leveraging the ASVS in the Secure SDLC - AppSecUSA 2017 2017
• Making Vulnerability Management Less Painful with OWASP DefectDojo - AppSecUSA 2017 2017
• Measuring End-to-End Security Engineering - AppSecUSA 2017 2017
• Monitoring Application Attack Surface and Integrating Security into DevOps - AppSecUSA 2017 2017
• Moving Fast and Securing Things - AppSecUSA 2017 2017
• NoSQL Is Not NoVulnerable - Johannes Ullrich - AppSecUSA 2017 2017
• Passive Fingerprinting of HTTP/2 Clients - Elad Shuster - AppSecUSA 2017 2017
• Popular Approaches to Preventing Code Injection Attacks are Dangerously Wrong - AppSecUSA 2017 2017
• Practical Dynamic Application Security Testing within an Enterprise - AppSecUSA 2017 2017
• ReproNow: Save time Reproducing and Triaging Security bugs - AppSecUSA 2017 2017
• Secure Product Lifecycle (SPLC) as a Service - AppSecUSA 2017 2017
• Securing C code that seems to work just fine - AppSecUSA 2017 2017
• Supply Chain Anarchy - Trojaned Binaries in the Java Ecosystem - AppSecUSA 2017 2017
• Test Driven Security in the DevOps pipeline - AppSecUSA 2017 2017
• This Old App, a guide to renovating apps for the cloud - AppSecUSA 2017 2017
• Top 10 Security Best Practices to secure your Microservices - AppSecUSA 2017 2017
• WAFs FTW! A modern devops approach to security testing your WAF - AppSecUSA 2017 2017
• What We Learned Remediating XSS in GitHub Open Source Projects - AppSecUSA 2017 2017
• When Molehill Vulnerabilities Become Mountainous Exploits - AppSecUSA 2017 2017
• Where we’re going… we won’t need passwords - AppSecUSA 2017 2017
• AppSec is Eating Security - Opening Keynote - AppSec California 2015 - Alex Stamos (low quality) 2015
• 11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey - OWASP AppSecUSA 2014 2014
• Anatomy of memory scraping credit card stealing POS malware - OWASP AppSecUSA 2014 2014
• AppSec Europe 2014 - Conference Closing Ceremony 2014
• AppSec Survey 2.0 : FineTuning an AppSec Training Program Based on Data cut - OWASP AppSecUSA 2014 2014
• AutoScaling Web Application Security in the Cloud - OWASP AppSecUSA 2014 2014
• Blended Web and Database Attacks on Real-time, In-Memory Platforms - OWASP AppSecUSA 2014 2014
• Bringing a Machete to the Amazon - OWASP AppSecUSA 2014 2014
• Catch me if you can: Building a Web Malware Analyzer using Machine Learning - OWASP AppSecUSA 2014 2014
• Clientside security with the Security Header Injection Module SHIM - OWASP AppSecUSA 2014 2014
• Cloud Security at Scale and What it Means for Your Application - OWASP AppSecUSA 2014 2014
• DevOps and Security: The Facts, The Myths, The Legend - OWASP AppSecUSA 2014 2014
• From the Ground Up - OWASP AppSecUSA 2014 2014
• Ground Truths of a Rugged DevOps Practitioner - OWASP AppSecUSA 2014 2014
• Hacking .NET(C#) Applications: The Black Arts (ASM attacks) - OWASP AppSecUSA 2014 2014
• Hacking the Oracle Application Framework - OWASP AppSecUSA 2014 2014
• Headless Browser Hide and Seek - OWASP AppSecUSA 2014 2014
• IEEE Computer Societys Center for Secure Design - OWASP AppSecUSA 2014 2014
• iOS App Integrity: Got Any? - OWASP AppSecUSA 2014 2014
• Lean Security for Small or Medium Sized Business - OWASP AppSecUSA 2014 2014
• Mobile Security Attacks: A Glimpse from the Trenches - OWASP AppSecUSA 2014 2014
• Modern Web Application Defense with OWASP Tools - AppSecUSA 2014 2014
• Not Go Quietly Adaptive Strategies and Unlikely Teammates - OWASP AppSecUSA 2014 2014
• OWASP A9: A Year Later - Are you still using components with known vulnerabilities? - AppSecUSA 2014 2014
• OWASP AppSecUSA 2014 - Keynote: Renee Guttmann - CISO Perspectives 2014
• OWASP Top 10 Mobile Risks: 2014 Reboot - Jack Mannino & Jason Haddix 2014
• Project Monterey or How I Learned to Stop Worrying and Love the Cloud - OWASP AppSecUSA 2014 2014
• Red Phish, Blue Phish: Improved Phishing Detection Using Perceptual Hashing - AppSecUSA 2014 2014
• Reversing Engineering a Web Application - For Fun, Behavior & WAF Detection - OWASP AppSecUSA 2014 2014
• Runtime Manipulation of Android and iOS Applications - OWASP AppSecUSA 2014 2014
• Static Analysis for Dynamic Assessments - OWASP AppSecUSA 2014 2014
• Stop Chasing Vulnerabilities - Introducing Continuous Application Security - OWASP AppSecUSA 2014 2014
• Ten Secrets to Secure Mobile Applications - OWASP AppSecUSA 2014 2014
• The DevOps of Everything - OWASP AppSecUSA 2014 2014
• Threat Modeling Made Interactive - OWASP AppSecUSA 2014 2014
• Top 10 Web Hacking Techniques of 2013 - OWASP AppSecUSA 2014 2014
• Use After Free Exploitation - OWASP AppSecUSA 2014 2014
• Warning Ahead: Security Storms are Brewing in Your JavaScript - OWASP AppSecUSA 2014 2014
• When you can't afford 0days: Client-side exploitation for the masses - OWASP AppSecUSA 2014 2014
• Where the Security Rubber Meets the DevOps Road - OWASP AppSecUSA 2014 2014
• Winston Bond - OWASP Mobile Top Ten 2014 - The New Lack of Binary Protection Category 2014
• Your Password Complexity Requirements are Worthless - OWASP AppSecUSA 2014 2014
• 2013 AppSec Guide and CISO Survey - Marco Morana, Tobias Gondrom 2013
• OWASP Global Webinar - 2013 Board election and WASPY 2013
• The 2013 OWASP Top 10 - Dave Wichers 2013
• Tobias Gondrom - OWASP-CISO Survey Report 2013 Tactical Insights for Managers 2013
• (Do Not Publish) Building a Static Analyzer from Scratch
• 0click enterprise compromise - thank you, AI!
• 9125 Days of OWASP Did We Make Software Safer?
• [En Español] Zed Attack Proxy - Alonso Eduardo Caballero Quezada
• Accelerating Software Security With OWASP SAMM - Sebastien Deelersnyder & Aram Hovsepyan
• Actionable Continuous SBOM Diffing - Pavel Shukhman
• Agile Development And IT Security: From Conflict To Collaboration - Juliane Reimann & Elisa Erbe
• AI & The Threat Modeling Manifesto:Conflicts, Failure Modes & Better Patterns - Vikramaditya Narayan
• AI and API Security Panel
• AI Explainability Score Card - Michael Novack
• AI-Generated Code Vs Human Code. Who Really Writes More Vulnerabilities - Eitan Worcel
• AppSec Israel Highlight
• Attacking ART - Jeroen Beckers
• Authorization Is Where Your App Goes To Lie - Eden Yardeni
• Beyond the Checklist: Adversary Simulation for Proactive Insecure Design Discovery track 2
• Boiling The Ocean For Signal: Lessons From High-Volume OSS Malware Detection - Henrik Plate
• Breaking the Black Box - Using the OWASP Threat Model Library to End Security via Obscurity
• Building A Security 'Culture' by Gareth O'Sullivan
• Building A Security Test Automation Framework by Riccardo Ten Cate
• Building a Static Analyzer from Scratch
• Building Secure Software With OWASP Tools And Guides by Martin Knobloch
• Building Security Into Developer Velocity: How We Made Entra Identity Compliance Invisible track 1
• Chinese PRC shenanigans in the npm mirror ecosystem
• Closing Remarks And Raffle - OWASP Board
• Closure Of Conference By OWASP MAS Team - Carlos Holguera & Sven Schleier
• Connecting the dots: 5 lessons learned from an 8 year journey of an AppSec Program track 1
• CTFs As A Community Of Practice Content Machine - Marco Macala, Florian Schier & Christian Buchinger
• CycloneDX 2.0 Preview: Evolving BOM Architecture for Broader Applicability
• Developer-Centric Threat Modeling: Embedding Security in Agile Workflows
• DOMination: Abusing The Permission Model In Web Extensions - Moshe Siman Tov Bustan & Nir Zadok
• Effort Is All You Need: Testing LLM Applications In The Real World - Donato Capitella & Thomas Cross
• Enforcing Application Security Policies At Scale: Lessons From A Rollout - Mehran Koushkebaghi
• Enforcing Organizational Rules In LLMs And AI Agents - Omer Hofman & Oren Rachmil
• Ensuring Your User Stories In Agile Playing OWASP Cornucopia - Grant Ongers & Max Vergaray
• Evolving Your Security Champions Program: Introducing the OWASP Security Champions Maturity Model
• Exploitable In The Wild CVE Appears! But Should We Fix 'em All?
• Fixing My Fixing Talk: What We Got Wrong (and Right) About AI Auto-Remediation
• From 0 To SLSA Level 3: A Level 3: A Practitioner's Field Guide - Mark Mishaev
• From Logs to Defense: Building AI Enhanced XDR Pipelines for Application Level Threats track 1
• German OWASP Day Highlight
• Hidden Risks of Integrating AI: Extracting Private Data with Real-World Exploits
• How OWASP Coraza Is Coming To Kubernetes World - Jose Carlos Chávez and Ricardo Katz
• How To (Not) Isolate Untrusted Code In Scripting Languages - Cristian-Alexandru Staicu
• How to play OWASP Cornucopia
• Human Rights Threat Modeling - Giovanni Corti, Simone Onofri & Luca Lumini
• I Exploited A Parking System For A Year (And What It Taught Me About AppSec) - Dimitar Raichev
• In GitHub We Trust: 10 Ways You Could Get Pwned
• Insecurity As Code: How Modern Software Scaled The Attack Surface - Igor Stepansky
• Introducing OWASP AGHAST: AI-Guided Hybrid Application Static Testing - Josh Grossman
• Introduction By OWASP MAS Team To MAS Con - Carlos Holguera & Sven Schleier
• It’s Giving Insecure Vibes: Secure Coding Literacy for Vibe Coders Track 1
• Keep It Between Us: Manipulating Humans For Better AppSec (Ethically) - Nariman Aga-Tagiyev
• Keynote: Chris Wysopal - AppSec: From Outsiders to Allies
• Keynote: Jaya Baloo - Our Secure Future
• Keynote: Mark Curphey - 20:20 The History and Future of OWASP
• Keynote: Philippe De Ryck - AppSec is too hard?
• Keynote: Who Deserves Cybersecurity? Expanding Our Circle of Care - Eva Galperin
• Leaking Secrets in the Age of AI: How AI Adoption is Creating New Attack Vectors
• Lessons Learned: AppSec Role Based Training 5 Years Ups, Downs, Futures
• Let's Get Frooky: Structured Mobile DAST With Frida - Stefan Bernhardsgrütter & Carlos Holguera
• LLM Backdoors in Plain Sight: The Threat of Poisoned Templates
• LLMs in AppSec: Why They Still Need a Chaperone
• MCP Deception Incubator — Honeytraps as a Framework for Zero Trust AI Environments track 2
• Meet The New Frida Frontend On The Block - Ole André Vadla Ravnås
• More about OWASP by Tom Brennan and Dennis Groves
• Mythos Or Myth: The Reality Of AI Vulnerability Discovery - Panel Discussion
• Noise vs. Signal: The Central Paradox of LLMs in Threat Modeling track 2
• One Bug Away From Pwning 10 Million Developer Machines - Oran Simhony & Gal Hachamov
• One Cluster to Rule Them All: Pentesting Multi-Tenant Kubernetes Clusters
• OpenCRE.org: Uniting All Standards And Guidelines - Rob Van Der Veer
• Opening Remarks - OWASP Board
• Opening Remarks - OWASP Board
• OWASP AI Exchange Showcase - Rob Van Der Veer and Aruneesh Salhotra & Behnaz Karimi
• OWASP AI Security Verification Standard AISVS - J Manico,R Komenda,O Sulin, R Memisyazici & R Sharif
• OWASP AI Testing Guide In Practice: Securing LLM Applications - Matteo Meucci & Marco Morana
• OWASP AIBOM: Pioneering AI Transparency Through Community-Driven Standards
• OWASP AppSec Day France Highlight
• OWASP Board Elections - Learn what it's like to be on the OWASP Board.
• OWASP Chair Update - Corporate Memberships
• OWASP Chair Update - Memberships
• OWASP Cornucopia - Stop Lecturing, Start Playing!
• OWASP Cornucopia Abuse Case Modeling
• OWASP Corporate Supporter Spotlight - root.io
• OWASP DefectDojo
• OWASP DefectDojo - Matt Tesauro
• OWASP Distinguished Lifetime Member Jeff Williams
• OWASP Distinguished Lifetime Membership interview with Dave Wichers
• OWASP Finance Overview Presentation
• OWASP Finance Summary
• OWASP Flagship Projects: Application Security Verification Standard - A. van der Stock & J. Manico
• OWASP Flagship Projects: OWASP Amass - Jeff Foley
• OWASP Flagship Projects: OWASP Cheat Sheet Series - Jim Manico
• OWASP Flagship Projects: OWASP Cloud-Native Application Security Top 10 Flagship Project - Ron Vider
• OWASP Flagship Projects: OWASP CSRFGuard - Albert-Tóth István
• OWASP Flagship Projects: OWASP CycloneDX - Steve Springett & Patrick Dwyer
• OWASP Flagship Projects: OWASP DefectDojo - Matt Tesauro & Aaron Weaver
• OWASP Flagship Projects: OWASP Dependency Track - Steve Springett
• OWASP Flagship Projects: OWASP Dependency-Check - Jeremy Long
• OWASP Flagship Projects: OWASP Juice Shop - Björn Kimminich
• OWASP Flagship Projects: OWASP Mobile Security Testing Guide - Carlos Holguera & Sven Schleier
• OWASP Flagship Projects: OWASP ModSecurity Core Rule Set - Christian Folini
• OWASP Flagship Projects: OWASP OWTF Flagship Project - Saurabh Nandedkar
• OWASP Flagship Projects: OWASP Security Knowledge Framework - Glenn ten Cate
• OWASP Flagship Projects: OWASP Security Shepherd - Sean Duggan
• OWASP Flagship Projects: OWASP Software Assurance Maturity Model (SAMM) - Bart De Win
• OWASP Flagship Projects: OWASP Top 10 "Intro of Top 10" - Andrew van der Stock
• OWASP Flagship Projects: OWASP Top 10 "The making of the OWASP Top 10 and beyond"
• OWASP Flagship Projects: OWASP Web Security Testing Guide - Matteo Meucci
• OWASP Flagship Projects: OWASP ZAP - Simon Bennetts
• OWASP Global Board of Directors Nomination Process
• OWASP Global Webinar - Unraveling the Wiki
• OWASP Global Webinar - Initiatives OWASP Projects
• OWASP Global Webinar - Jack Mannino - GoatDroid release
• OWASP Global Webinar - Josh Sokol - Simple Risk
• OWASP Global Webinar - Ken Johnson - RailsGoat
• OWASP Global Webinar - Marketing Strategy
• OWASP Global Webinar - OWASP HIVE Project - Welcome to the Grid
• OWASP Global Webinar - OWASP Passfault Project
• OWASP Global Webinar - OWASP Reverse Engineering and Code Modification Project
• OWASP Global Webinar - PHP Security Project
• OWASP Global Webinar - Using the O2 platform
• OWASP KubeFIM: Detecting File Integrity Threats With EBPF & AI In Kubernetes - Abhijit Chatterjee
• OWASP Leaders Must Become Members
• OWASP Leaders: How to manage your project, chapter, working group, or meeting
• OWASP MCP Top 10: When AI Agents Go Rogue, Securing The Model Context Protocol- Vandana Verma Sehgal
• OWASP Mobile Application Security (MAS) Project Updates - Carlos Holguera & Sven Schleier
• OWASP Nettacker Project - Sam Stepanyan & Arkadii Yakovets
• OWASP NL Chapter Meeting: Machine Learning Vs. Cryptocoin Miners - Jonn Callahan
• OWASP NL Chapter Meeting: OWASP Integration Standards project update by Rob van der Veer
• OWASP NL Chapter Meeting: SKF News - Riccardo ten Cate and Glenn ten Cate
• OWASP NLChapter Meeting: Running At Light Speed: Cloud Native Security Patterns - Jack Mannino
• OWASP Platinum Corporate Supporter - An Interview with Abraham Aranguren, of 7ASecurity
• OWASP Podcast - Mark Miller and Jim Manico
• OWASP Standard Classification: Achieving Security by Shifting Left in Agile - BHUSHAN B GUPTA
• OWASP Standard Classification: API Security Top 10 - A Beginner's Guide to Mitigation - I. Mauny
• OWASP Standard Classification: Automate Security, Don't Tell Your Boss - M. Tesauro
• OWASP Standard Classification: Back to Basics: Looking for subtle bugs in beginne... - Cole Cornford
• OWASP Standard Classification: Birds & Buttons - Cyber Risk Success Criteria for Board ... - S. Tan
• OWASP Standard Classification: Connecting the Dots: How Threat Intelligence Protect... - C. Curelaru
• OWASP Standard Classification: DevSecOps in 2031: How robots and humans will ... - S. Streichsbier
• OWASP Standard Classification: Everything You Always Wanted to Know About Finge... - N. Nikiforakis
• OWASP Standard Classification: Fight Club | Grow your OWASP Chapter - Sam Stepanyan • Tom Brennan
• OWASP Standard Classification: Good Bot, Bad Bot: Characterizing Automated Brows... - N. Nikiforakis
• OWASP Standard Classification: How To Review Code For Vulnerabilities - Vickie Li
• OWASP Standard Classification: Introducing graph theory to Policy-As-Code - Barak Schoster
• OWASP Standard Classification: Live Q&A Session - Troy Hunt
• OWASP Standard Classification: OWASP Application Gateway: What is it and how can you ... - G. Frei
• OWASP Standard Classification: Purple Teaming with OWASP PurpleTeam - Kim Carter
• OWASP Standard Classification: Rough Consensus - An OWASP Story - Jeff Williams
• OWASP Standard Classification: Security Chaos Engineering - Turning the Tide in ... - A. Rinehart
• OWASP Standard Classification: Stop the looters: method to detect digital skimming a... - N. Alexiou
• OWASP Standard Classification: Threat Modeling the CI/CD Pipeline to Improve Softwar... - D. Cornell
• OWASP Standard Classification: What Shall We Do With a Vendor SBOM? - Wendy Nather
• OWASP Talk - HTTP3 Security - Robin Marx
• OWASP Update - Projects & Outreach
• OWASP Webcast Series - Security Knowledge Framework
• Personal Relevance In The Age Of AI - Panel Discussion
• Phishing For Passkeys: An Analysis Of WebAuthn And CTAP - Michael Kuckuk
• Post-Quantum Threats in Real Code: Finding and Fixing Cryptographic Risk at Scale
• Pragmatic Least-privilege For Cloud And Kubernetes - Mark Vinkovits
• Q-Day Is Cancelled: Practical Strategies To Defeat 'Harvest Now, Decrypt Later' - Anshu Gupta
• Recent Mobile App Security Incidents From Real-World Cases - Jan Seredynski
• Red vs. Blue: Threat Modeling Agentic AI & Securing the Unbounded Third Party
• Retiring CVE Chasing: Defending Against Application Exploit Techniques - Idan Elor
• SBOMs in the Real World: Practical Guidance for Managing Three Common SBOM Scenarios
• Secure Financial Analytics with Homomorphic Encryption and GAN Driven Data Track 2
• Securing Agentic AI After The Death Of LLM Wrappers - Javan Rasokat & Rico Komenda
• Securing AI Agents: Maximize ROI, Minimize Risk
• Securing Apps Without a Budget: Minimal Viable Security Strategies track 2
• Securing Your Supply Chain’s Weakest Link - Moshe Siman Tov Bustan & Nir Zadok
• Security Champions: Lessons From Opposite Trenches - Lisi Hocke & Mireia Cano
• Security Exception Management: Balancing Risk with Reality at Enterprise Scale
• Security for Citizen Developers: Low-Code/No-Code Cybersecurity Threats
• Serverless Security: Functions-as-a-Service (FaaS) by Niels Tanis
• Sherif Mansour - Donate Blood Today!
• So You Want To Be An OWASP Speaker?
• Taming The AppSec Data Deluge - Ben Sleek
• Teaching AI Agents Like Guide Dogs: A Progressive Trust Framework - Bodhisattva Das
• Temporal: Achieving the Web Isolation Nirvana - How far along are we? - Jasvir Nagra • Pedro Fortuna
• Temporal: AppSec Timeline: Wins, Failures, Promises, and Predictions - Joseph Feiman
• Temporal: Blockchain-based Security Framework for Cyber Physical Systems (BSF-CPS) - Dr. A. Vyas
• Temporal: Bot or human? Detecting malicious bots with machine... - Benjamin Fabre • Antoine Vastel
• Temporal: Code-Origin Policy: Towards a Formal User Privacy Protection for the Web - Phu H. Phung
• Temporal: Decoded: Leverage Cybersecurity as a Business Enabler - Nicole Dove
• Temporal: It's Not Your Developers' Fault - Edwin Kwan
• Temporal: Looking at 4 years of web honeypot attacks: tactics, ... - Malcolm Heath • Raymond Pompon
• Temporal: Objects In The Rear View Mirror Are Closer Than They Appear
• Temporal: Over 20 Years of SQL Injection Attacks in the Wild - Time to Refine and ... - Or Katz
• Temporal: OWASP ESAPI – A Retrospective: The Good, the Bad, & the Ugly - Kevin Wall
• Temporal: OWASP Nettacker Project Presentation - Sam Stepanyan
• Temporal: Preventing an OWASP Top 10 in the world of AI - Aaron Ansari
• Temporal: Redefining Threat Modeling: Security team goes on vacation - Jeevan Singh
• Temporal: Security As Code - The New Model Of Achieving Security At Scale - Dr. Chenxi Wang
• Temporal: The future is simple - introducing the CRE - Rob van der Veer • Spyros Gasteratos
• Temporal: The future of Dev[Sec]Ops transformation - Larry Maccherone
• Temporal: Your company, as a Knowledge Graph - the foundation of cybersecurity’s future - O. Cical
• The Appsec Program I Regret Building
• The Art of Cybersecurity Mastery: From Entry-Level to Staff+
• The Devil Is In The Defaults: What To Do About XSS - Frederik Braun
• The History of the OWASP Developer Guide
• The Map Of Artificial Treasures: What To Automate In Security - And Why? - Michael Helwig
• The Most Common AppSec Failures in Fortune 500 Companies and Beyond
• The OG OWASP Top 10 Might Be Back Thanks To Agentic Browsers - Lidan Hazout and Bar Kaduri
• The OWASP Events Committee Presents Vienna 26
• The Reinvention Of Software Engineering - Hannah Foxwell
• The TPM And You: How (And Why) To Actually Make Use Of Your TPM - Mathias Tausig
• The Velocity Paradox: Why Slow Is Smooth And Smooth Is Fast In AppSec - Pramod Rana
• This Build Can Break You Evil Runners And EBPF For Detection - Reinhard Kugler
• Threat Modeling Developer Behaviour: The Psychology of Bad Code
• Threat Modeling For Developers (Panel)
• Topics of Interest: Security begins with secure development environments - V. Verma • S. Coochin
• Topics of Interest: Agile Threat Modeling with Open-Source Tools - Christian Schneider
• Topics of Interest: All your Ether belong to us (Hacking Ethereum-based DApps) - L. Q. Gonzales
• Topics of Interest: Attacking the microservice systems: methods and practical tips - A. Barabanov
• Topics of Interest: Attacking the microservice systems: methods and practical tips - A. Barabanov
• Topics of Interest: Automated Finding Correlation where do SAST, DAST and ... - R. Klein • E. Worcel
• Topics of Interest: Automatic Vulnerability Remediation: The Trusted and Secure Road ... - R. Elron
• Topics of Interest: AWS (mis)configuration from an attacker’s-eye view - Kavisha Sheth
• Topics of Interest: Building Diversity into AppSec
• Topics of Interest: Common Application Security Mistakes that Enable Automated Attacks - Jason Kent
• Topics of Interest: Common NGINX Misconfigurations That Leave Your Web Server Open ... - S. Pearlman
• Topics of Interest: Costly mistakes in serverless computing - Miguel Calles
• Topics of Interest: Creating an IoT-connected Mobile App Compliance Program... OWASP MASVS - B. Reed
• Topics of Interest: Developers Struggle with Application Security (and How to Make ...) - S. Gerlach
• Topics of Interest: Effective Usage Analysis: The Shortest Path Between a Developer ... - R. Elron
• Topics of Interest: Five philosophies to building better application logs - Veronica Schmitt
• Topics of Interest: Hack Your APIs in 15 Minutes or Less - Himanshu Dwivedi
• Topics of Interest: How Security, Development & Testing can work together to stop ... - S. Chaplin
• Topics of Interest: Kubernetes Security: Attacking and Defending K8s Clusters - Magno Logan
• Topics of Interest: Post-DevOps, what should we shift-left? - Riotaro OKADA
• Topics of Interest: React Native Security. Addressing typical mistakes - Julia Potapenko
• Topics of Interest: Running a local Chapter - Serge Borso
• Topics of Interest: Scaling AppSec through Education - Grant Ongers
• Topics of Interest: Security Metrics: Protecting Our Digital Assets of the Future - Caroline Wong
• Topics of Interest: Software Security Engineering (Learnings from the past to fix ...) - D. Mohanty
• Topics of Interest: These are the Vulns You are Looking For: AppSec Champions & Jedi... - J. Dickson
• Topics of Interest: Top 10 Challenges for DevSecOps - Gary Robinson
• Topics of Interest: Unlocking Mobile App Security Secrets - Jan Seredynski
• Topics of Interest: Using binary search algorithms for blind sql injection - Juan Pablo Quiñe Paz
• Topics of Interest: vAPI: Vulnerable Adversely Programmed Interface (OWASP API Top 10) - T. Kulkarni
• Topics of Interest: Your code might be secure, but what about your pipeline? ... - M. Szydłowski
• Towards the next generation OWASP CRS ruleset language
• Tracking CVE Propagation Across 10.000 Projects - Lior Kaplan & Mor Weinberger
• Transparency Exchange API: How Do You Find the SBOM for a Smart Light Bulb?
• Trust No One – Especially the Agents Building Zero Trust Through Machine Identity Track 2
• Unveiling The Internals From Multiplatform Mobile Runtimes - Sergi Alvarez
• Updates On The OWASP Automated Threats Project - Tin Zaw
• Using Infrastructure Signals To Detect Shadow AI Built Applications - Balachandra Shanabhag
• Using OWASP SAMM And OWASP DSOMM Together In Practice - Aram Hovsepyan & Timo Pagel
• We Live In The Future: The Death And Rebirth Of Application Security - Gadi Evron
• What Changes When You Treat Privacy As A System Property? - Matthew Coles, Kim Wuyts & Avi Douglen
• What Our Pen Tests Never Found And How Attackers Did - Ramya M
• When Museums Get Hacked: OWASP Top 10 Lessons From Heists - Jose Carlos Chávez
• Why Every "Remembered" Interaction Is A Potential Backdoor - Rico Komenda & Barno Kaharova
• Why IAM Remains A Challenge And What We Can Do About It - Dimitrij Drus
• “The Developer First Security Mindset” Making Security a Product Feature, Not a Blocker