AI
OWASP DefectDojo
application securitygovernance and risk
Cybersecurity
OWASP Global AppSec USA 2024 2024
OWASP Global AppSec USA 2024 is a premier application security conference. It brings together 800+ developers, security experts, and leaders for sessions on AI security, threat modeling, and DevSecOps.
55
Talks
Day 1
55 talks
OWASP DevSecOps Maturity Model (DSOMM)
application securitygovernance and risk
OWASP IoT Security Testing Guide (ISTG)
mobile and iot securityoffensive security
OWASP JuiceShop
application securityoffensive security
OWASP Software Assurance Maturity Model (SAMM)
application securitygovernance and risk
OWASP Top 10 Risks for Open Source Software
application securitygovernance and risk
OWASP Application Security Verification Standard (ASVS)
application securitygovernance and risk
OWASP Nettacker
offensive securitynetwork and infrastructure
OWASP Serverless Top 10
application securitycloud security
OWASP Mobile Application Security (MAS)
mobile and iot securityapplication security
OWASP Coraza - Web Application Firewall
application securitynetwork and infrastructure
From Hype to Reality: The Broken State of DevSecOps and Its Maturity Model
application securitysecurity leadership
From Start Line to Security Finish: Running Your Application Security Program Like a Marathon
application securitysecurity leadership
The Path to Influence: How Three Threat Modelers Can Influence an Entire Organization
application securitysecurity leadershipdefensive security
I Know What You Did Last Summer: Lessons Learned from Privacy Breaches and Scandals
governance and riskapplication security
Who Hurt You? Earning the trust of developers
application securitysecurity leadership
Businesses Run On Risk And Debt: Why Communicating Security Risk Is Hard
security leadershipgovernance and risk
Learning from "edge of tomorrow" to build an effective security design review program
application securitysecurity leadership
Bridging Security & Privacy Standards: Harnessing OpenCRE for Effective Mapping
governance and riskapplication security
How to get developers to want to adopt AppSec
application securitysecurity leadership
AppSec Meets Project Management: Hacking the Frameworks for Secure Software
application securitygovernance and risksecurity leadership
Kernel Alchemy: Crafting Mobile Kernel Code to Evade Modern RASP Protections
mobile and iot securityoffensive securityapplication security
GraphQL Exploitation: Secondary Context Attacks and Business Logic Vulnerabilities
offensive securityapplication security
AI Goat: A Damn Vulnerable AI Infrastructure
ai securitycloud securityoffensive security
Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail
application securityoffensive security
Web Security Experts: Are you overlooking WebRTC vulnerabilities?
offensive securityapplication securitynetwork and infrastructure
Modernizing the Application Penetration Engagement and Reporting Lifecycle
offensive securityapplication security
Thriving in the Age of AI (Keynote)
ai securitysecurity leadership
Hidden Chains: Revealing High-Impact Bugs from Bounty submissions
offensive securityapplication security
Hackuracy: Boosting AST accuracy through hacking
application securityoffensive securitygovernance and risk
Think Like a Hacker (Keynote and book signing)
offensive securitysecurity leadership
Living off Microsoft Copilot
offensive securityai security
Red, Blue, and Purple AI (Keynote)
offensive securitydefensive securityai security
Breaking the Mold: Navigating the Intersection of Technology, Security, and Trust (Keynote)
security leadershipapplication security
O My Data: OData Injection attack and other injections in Microsoft Power Platform and UiPath
application securityoffensive security
Don't Make This Mistake: Painful Learnings of Applying AI in Security
application securityai security
Under the Radar: How we found 0-days in the Build Pipeline of OSS Packages
application securityoffensive security
OWASP AI Exchange experts on the future of security for AI
ai securitygovernance and riskapplication security
Striding Your Way to LINDDUN: Threat Modeling for Privacy
application securitygovernance and risk
OWASP Top 10 for Large Language Models: Project Update
ai securityapplication securitygovernance and risk
Maturing Your Application Security Program with ASVS-Driven Development
application securitygovernance and risk
Threat Modeling in the Age of AI
ai securityapplication security
Millions Of Public Certificates Are Reusing Old Private Keys
cryptographyapplication security
Escaping Vulnerability Hell: Bridging the Gap Between Developers and Security Teams
application securityai security
Slack's Vulnerability Aggregator: How we built a platform to manage vulnerabilities at scale
application securitygovernance and risk
3 Day Training: Web Application Security Essentials
governance and riskapplication security
The Container Escape Room: An Exploration of Container Escapes
cloud securityoffensive securitydefensive security
AI Code Generation - Benefits, Risks and Mitigation Controls
application securityai securitygovernance and risk
Practical Software Supply Chain Security Solutions
application securitygovernance and risk
Automatic application hardening by leveraging container runtime behavior analysis during CI processes
cloud securityapplication securitydefensive security
5 Steps to VEX Success: Managing the End-to-End Workflow
application securitygovernance and risk
The Missing Link - How we collect and leverage SBOMs
application securitygovernance and risknetwork and infrastructure
AI Under the Hood: Unmasking Hidden Threats
ai securityapplication security
OWASP: The Next 25 years
application securitysecurity leadershipgovernance and risk
Learning from Past Security Breaches: Strengthening AppSec Efforts and Focus
application securitydefensive securitygovernance and risk