OWASP Global AppSec US 2021 has ended

Create Your Own Event

OWASP Global AppSec US 2021

10:00am PST

Ensuring Git & CI/CD Pipeline Security & Integrity On-Line We’re not in HTTP anymore: Investigating WebSocket Server Security On-Line Ending Injection Vulnerabilities On-Line

11:00am PST

All your Ether are belong to us (a.k.a Hacking Ethereum-based DApps) On-Line Metabadger: Automating IMDS Protection at Scale in AWS On-Line Practical Threat Modeling for real-world and Cloud Situations in our hybrid and WFH World On-Line

1:00pm PST

How to Thwart Malicious Automation and Kick Bot Butt for $0 On-Line Container Security: It’s All About the Supply Chain On-Line

3:00pm PST

Harmonizing the OWASP API and Application Top 10 Lists On-Line Bots have gone phishing, but all they get is the boot On-Line Security Observability 101: Thinking Inside the Box! On-Line

4:00pm PST

SBOM SmackDown: Conquer dragons in the shadows with OWASP CycloneDX On-Line Purple Teaming with OWASP PurpleTeam On-Line

10:00am PST

Data at Rest Encryption - Going Beyond the Basics to Address Modern Attacks On-Line OWASP cautions against “insufficient logging & monitoring.” What does sufficient look like? On-Line

11:00am PST

How hackers can breach your C.I / C.D systems On-Line Automating Architectural Risk Analysis with the Open Threat Model format On-Line Why checking your infrastructure-as-code for misconfigurations is not enough – How to secure your cloud native applications On-Line

1:00pm PST

Exploiting web messaging implementations On-Line OWASP ESAPI – A Retrospective: The Good, the Bad, & the Ugly On-Line Roadblocks for CSP and Where to Find Them On-Line Scaling Security through Context Based Security Assessments On-Line

3:00pm PST

Outside the box: pwning IoT devices through their applications On-Line Data-Driven AppSec Champions Programs – Benchmarking Your Program with Numbers On-Line Cluster Wrangling: How to make Kubernetes clusters secure and usable On-Line

4:00pm PST

Application Threat Modeling Implementation Tips and Tricks On-Line Security Design Anti-Patterns – Creating Awareness to Limit Security Debt On-Line Web Application Honeypot Threat Intelligence On-Line OWASP ZAP & DeepFactor Continuous AppSec Observability: Made For Each Other! On-Line