OWASP Global AppSec US 2021

Attending this event?

OWASP Global AppSec US 2021

#1

Container Security: It’s All About the Supply Chain

#2

Practical Threat Modeling for real-world and Cloud Situations in our hybrid and WFH World

#3

The How and Why of the OWASP Top Ten 2021

#4

Security Design Anti-Patterns – Creating Awareness to Limit Security Debt

#5

We’re not in HTTP anymore: Investigating WebSocket Server Security

#6

How hackers can breach your C.I / C.D systems

#7

Why checking your infrastructure-as-code for misconfigurations is not enough – How to secure your cloud native applications

#8

Application Threat Modeling Implementation Tips and Tricks

#9

25 Years in AppSec: Looking Back, Looking Forward

#10

Building Security Champions

#11

Cluster Wrangling: How to make Kubernetes clusters secure and usable

#12

Data at Rest Encryption - Going Beyond the Basics to Address Modern Attacks

#13

How to Use Your Vulnerabilities to Train Your Developers on Security

#14

Keynote

#15

Harmonizing the OWASP API and Application Top 10 Lists

#16

SBOM SmackDown: Conquer dragons in the shadows with OWASP CycloneDX

#17

Keynote

#18

Why SecDevOps is the new way in Cybersecurity?

#19

600 apps in 60 days: our journey to uncover vulnerable dependencies at scale with OWASP Dependency-Check

#20

Scaling Security through Context Based Security Assessments

#21

Data-Driven AppSec Champions Programs – Benchmarking Your Program with Numbers

#22

Ensuring Git & CI/CD Pipeline Security & Integrity

#23

Metabadger: Automating IMDS Protection at Scale in AWS

#24

Security Observability 101: Thinking Inside the Box!

#25

Purple Teaming with OWASP PurpleTeam

#26

Ending Injection Vulnerabilities

#27

OWASP cautions against “insufficient logging & monitoring.” What does sufficient look like?

#28

Automated Serverless Security Testing: Delivering secure apps continuously

#29

How to Thwart Malicious Automation and Kick Bot Butt for $0

#30

OWASP Leaders Meeting

#31

Magecart - The Rising Threat to e-commerce Websites

#32

Automating Architectural Risk Analysis with the Open Threat Model format

#33

Keynote

#34

OWASP Open Application Security Curriculum

#35

How to build a security mindset

#36

Lunch/Expo Hall

#37

Exploiting web messaging implementations

#38

Roadblocks for CSP and Where to Find Them

#39

GitHub

#40

Azure Vulnerability Testbed (AzGOAT)

#41

Bots have gone phishing, but all they get is the boot

#42

Insiders Guide to Mobile AppSec with Latest OWASP MASVS

#43

Lunch/Expo Hall

#44

Outside the box: pwning IoT devices through their applications

#45

Web Application Honeypot Threat Intelligence

#46

Demystifying the Digital Pandemic

#47

Who’s in control: Human or Machine?

#48

All your Ether are belong to us (a.k.a Hacking Ethereum-based DApps)

#49

OWASP ESAPI – A Retrospective: The Good, the Bad, & the Ugly

#50

OWASP ZAP & DeepFactor Continuous AppSec Observability: Made For Each Other!