Канал: OWASP DevSlop

Empathy-led Product Security with Christian Frichot

Empathy-led Product Security with Christian Frichot

Growing pains: How security changes as your startup develops

Growing pains: How security changes as your startup develops

Guardrails: who, what, why, when

Guardrails: who, what, why, when

Hacking Mobile Games with Alex Rosenzweig

Hacking Mobile Games with Alex Rosenzweig

Hacking with Documentation with Heidi Waterhouse

Hacking with Documentation with Heidi Waterhouse

Yellow Team + Blue Team = Green Team

Yellow Team + Blue Team = Green Team

Top 10 CI/CD Security Risks

Top 10 CI/CD Security Risks

Demystifying the SBOM’s impact on Secure Software Deployment

Demystifying the SBOM’s impact on Secure Software Deployment

Project “Make ISO Happen 2022” - The Octopus Deploy Adventure Towards 27001 Certification

Project “Make ISO Happen 2022” - The Octopus Deploy Adventure Towards 27001 Certification

Learning from AWS (Customer) Security Breaches with Rami McCarthy

Learning from AWS (Customer) Security Breaches with Rami McCarthy

Privilege Escalation in the Cloud with Carlos Polop

Privilege Escalation in the Cloud with Carlos Polop

Diving Deeper into Subdomain Takeovers & Mitigations with Shubham Shah

Diving Deeper into Subdomain Takeovers & Mitigations with Shubham Shah

Finding bugs with Nuclei with PinkDraconian (Robbe Van Roey)

Finding bugs with Nuclei with PinkDraconian (Robbe Van Roey)

Github Actions Security Best Practices with Reethi Kotti

Github Actions Security Best Practices with Reethi Kotti

Don't Get Got! How to Avoid a Privacy Disaster with Samantha Floreani

Don't Get Got! How to Avoid a Privacy Disaster with Samantha Floreani

Software Security Education with the OWASP Secure Coding Dojo

Software Security Education with the OWASP Secure Coding Dojo

Building Modern Access-Control for Cloud Applications

Building Modern Access-Control for Cloud Applications

Account Security beyond 2FA with Neil Matatall

Account Security beyond 2FA with Neil Matatall

Let’s Write Security Unit Tests! with Eric Johnson

Let’s Write Security Unit Tests! with Eric Johnson

Attacking JSON Web Tokens with Louis Nyffenegger

Attacking JSON Web Tokens with Louis Nyffenegger

Secure Your Code With GitHub Code Scanning

Secure Your Code With GitHub Code Scanning

OAuth 2.0 Hacking for Beginners with Farah Hawa

OAuth 2.0 Hacking for Beginners with Farah Hawa

Fixing OSS Security Vulnerabilities at Scale!

Fixing OSS Security Vulnerabilities at Scale!

Threats Against Application Identities in the Microsoft Cloud

Threats Against Application Identities in the Microsoft Cloud

Security in Kubernetes - How to do it right!

Security in Kubernetes - How to do it right!

Testing Your Assumptions with Red Teaming

Testing Your Assumptions with Red Teaming

OAuth and OpenID Connect Clearly Explained

OAuth and OpenID Connect Clearly Explained

Containers in a nutshell — ähm pod! Containers in a pod

Containers in a nutshell — ähm pod! Containers in a pod

Cloud Security Tooling for the Sole Practitioner

Cloud Security Tooling for the Sole Practitioner

Demystifying Mobile Security With a COVID App

Demystifying Mobile Security With a COVID App

How to Analyze Code for Vulnerabilities using Joern

How to Analyze Code for Vulnerabilities using Joern

Vulnerability Writeups: The Magical 5 Minute Formula

Vulnerability Writeups: The Magical 5 Minute Formula

DevSecOps wins with Security Unit Tests

DevSecOps wins with Security Unit Tests

Software Security at Rocketship Pace with Alex Rosenzweig

Software Security at Rocketship Pace with Alex Rosenzweig

Fuzzing, DevOps, and You: Getting to Know Fuzzing

Fuzzing, DevOps, and You: Getting to Know Fuzzing

How to do Code Review - The Offensive Security Way

How to do Code Review - The Offensive Security Way

Handling software architecture shifts with Victoriya Kalmanovich

Handling software architecture shifts with Victoriya Kalmanovich

The Dark Side of DevSecOps with Yasmin Taylor

The Dark Side of DevSecOps with Yasmin Taylor

YOUR Career in AppSec with Tanya Janca

YOUR Career in AppSec with Tanya Janca

Occupy Babel! Langsec Explained in a Few Slogans

Occupy Babel! Langsec Explained in a Few Slogans

How to Analyze Code for Vulnerabilities

How to Analyze Code for Vulnerabilities

Codify Workflows for Security and Speed

Codify Workflows for Security and Speed

Workshop: Exploring Policy as Code for Cloud Infrastructure

Workshop: Exploring Policy as Code for Cloud Infrastructure

How to Implement an Effective Cloud Resource Tagging Strategy Using IaC

How to Implement an Effective Cloud Resource Tagging Strategy Using IaC

Hunting for IDORs with Katie Paxton-Fear

Hunting for IDORs with Katie Paxton-Fear

Workshop: Scaling your AppSec Program with Semgrep

Workshop: Scaling your AppSec Program with Semgrep

Javascript Security with Sherif Koussa

Javascript Security with Sherif Koussa

Shifting Cloud Security Left: Scanning Infrastructure as Code for Security Issues

Shifting Cloud Security Left: Scanning Infrastructure as Code for Security Issues

Cloud Security and IAM for Developers

Cloud Security and IAM for Developers

Secrets Management: A Developer's View with Rob Barnes

Secrets Management: A Developer's View with Rob Barnes

Security & Compliance for Cloud Infrastructure with CloudQuery

Security & Compliance for Cloud Infrastructure with CloudQuery

DevSlop Game Day : Closing Briefing

DevSlop Game Day : Closing Briefing

DevSlop Game Day : Deploying a Microservice Application to Kubernetes

DevSlop Game Day : Deploying a Microservice Application to Kubernetes

Finding Security Vulnerabilities through Code Review - The OWASP way

Finding Security Vulnerabilities through Code Review - The OWASP way

5 Steps to Establish the Foundation of Your AWS Security Program with AJ Yawn

5 Steps to Establish the Foundation of Your AWS Security Program with AJ Yawn

SCA: Understanding and securing what's in your software supply chain with Maya Kaczorowski

SCA: Understanding and securing what's in your software supply chain with Maya Kaczorowski

Teaching the OWASP Top 10 to Beginning Developers with Olivia Liddell!

Teaching the OWASP Top 10 to Beginning Developers with Olivia Liddell!

Introducing Threats Manager Studio with Simone Curzi

Introducing Threats Manager Studio with Simone Curzi

Automating Application Security Testing is Hard - Improvisational Episode

Automating Application Security Testing is Hard - Improvisational Episode

DevSlop Game Day Recap & Solution with Renan Dias

DevSlop Game Day Recap & Solution with Renan Dias

DevSlop Game Day: A DevOps CTF ( Introduction to Containerization and Docker)

DevSlop Game Day: A DevOps CTF ( Introduction to Containerization and Docker)

Serverless Observability in AWS : A Learner's Journey with Kiki Morgan!

Serverless Observability in AWS : A Learner's Journey with Kiki Morgan!

Compromised Compilers - A new perspective of supply chain cyber attacks

Compromised Compilers - A new perspective of supply chain cyber attacks

Practical DevSecOps Workshop - is DAST the gift or bane? with Mohammed A. Imran

Practical DevSecOps Workshop - is DAST the gift or bane? with Mohammed A. Imran

Embrace Secure Defaults, Block Anti-patterns, and Kill Bug Classes with Semgrep with Clint Gibler

Embrace Secure Defaults, Block Anti-patterns, and Kill Bug Classes with Semgrep with Clint Gibler

The Act of Balancing: Burnout in Cybersecurity with Chloé Messdaghi!

The Act of Balancing: Burnout in Cybersecurity with Chloé Messdaghi!

AppSec at the Speed of DevOps: 3 Common Mistakes with Erica Anderson!

AppSec at the Speed of DevOps: 3 Common Mistakes with Erica Anderson!

Hacking JWTs for Beginners with Farah Hawa

Hacking JWTs for Beginners with Farah Hawa

Automate, Audit and Codify Your AWS IAM Configuration With Bridgecrew's AirIAM

Automate, Audit and Codify Your AWS IAM Configuration With Bridgecrew's AirIAM

Healthy Posture and You Are in the Clouds with Marina Segal!

Healthy Posture and You Are in the Clouds with Marina Segal!

GitOps and Best Practices for Managing Infrastructure with Javeria Khan!

GitOps and Best Practices for Managing Infrastructure with Javeria Khan!

Orchestration with Nomad from A(rtifacts) to Z(ones) with Jacquie Grindrod!

Orchestration with Nomad from A(rtifacts) to Z(ones) with Jacquie Grindrod!

Knock Your SOCs Off: Modernizing Security Operations with Kat Sweet!

Knock Your SOCs Off: Modernizing Security Operations with Kat Sweet!

Ceci n'est pas une Pipeline: is it CI/CD or WHAT?

Ceci n'est pas une Pipeline: is it CI/CD or WHAT?

Checkov: Security & Compliance for Your Infrastructure-as-Code

Checkov: Security & Compliance for Your Infrastructure-as-Code

Automating Cloud Security with Open Policy Agent with Josh Stella! - OWASP DevSlop

Automating Cloud Security with Open Policy Agent with Josh Stella! - OWASP DevSlop

Secure-er Code Reviews with Seth & Ken! - OWASP DevSlop

Secure-er Code Reviews with Seth & Ken! - OWASP DevSlop

Practical Application of the API Security Top 10 with Rajni Hatti! - OWASP DevSlop

Practical Application of the API Security Top 10 with Rajni Hatti! - OWASP DevSlop

Logging & Monitoring on AWS 101 with Veliswa Boya! - OWASP DevSlop

Logging & Monitoring on AWS 101 with Veliswa Boya! - OWASP DevSlop

Securing your code with CodeQL with Sasha Rosenbaum! - OWASP DevSlop

Securing your code with CodeQL with Sasha Rosenbaum! - OWASP DevSlop

API hacking for the Actually Pretty Inexperienced hacker with Katie Paxton-Fear - OWASP DevSlop

API hacking for the Actually Pretty Inexperienced hacker with Katie Paxton-Fear - OWASP DevSlop

An AWSome Guide to DevOps with Zainub Amod

An AWSome Guide to DevOps with Zainub Amod

Secure your serverless! Offense and Defensive Measures with Teri Radichel - OWASP DevSlop

Secure your serverless! Offense and Defensive Measures with Teri Radichel - OWASP DevSlop

Security & Policy Configurations for Infrastructure as Code with Rosemary Wang - OWASP DevSlop

Security & Policy Configurations for Infrastructure as Code with Rosemary Wang - OWASP DevSlop

Compliance as Code - The Why, What and How with Mario Platt - OWASP DevSlop

Compliance as Code - The Why, What and How with Mario Platt - OWASP DevSlop

GitHub Actions: Beyond CI/CD with Pierre-Nicolas Durette - OWASP DevSlop

GitHub Actions: Beyond CI/CD with Pierre-Nicolas Durette - OWASP DevSlop

Google Cloud Platform Security with Dominique West - OWASP DevSlop

Google Cloud Platform Security with Dominique West - OWASP DevSlop

OWASP DevSlop: OWASP ModSecurity Core Rule Set (CRS) with Franziska Bühler and Christian Folini!

OWASP DevSlop: OWASP ModSecurity Core Rule Set (CRS) with Franziska Bühler and Christian Folini!

Azure Cloud Native Security Workshop with Tanya Janca

Azure Cloud Native Security Workshop with Tanya Janca

Tanya fixes the Content Security Policy header that has broken DevSlop.co

Tanya fixes the Content Security Policy header that has broken DevSlop.co

OWASP DevSlop Show: Catching Secrets in the Cloud with Pawel Rzepa!

OWASP DevSlop Show: Catching Secrets in the Cloud with Pawel Rzepa!

OWASP DevSlop Show: Security Code Review 101 with Paul Ionescu!

OWASP DevSlop Show: Security Code Review 101 with Paul Ionescu!

OWASP DevSlop Show: Rapid Threat Model Prototyping with Geoffrey Hill!

OWASP DevSlop Show: Rapid Threat Model Prototyping with Geoffrey Hill!

Containerized Adventures with Kaslin Fields

Containerized Adventures with Kaslin Fields