Talks·59 min
Explains blockchain, smart contracts, and NFTs from a security angle, covering wallet risks, auditing and emerging threats.
webtrustapplication+2
2021 · Austin, TX, USA
LASCON 2021
1 session · 30 talks
Sessions at this event
All LASCON 2021 talks
1–24 of 30 talks
Talks·30 min
Explains how API-driven application architectures widen attack surfaces and outlines controls for securing APIs at enterprise scale.
applicationwebattack+2
Talks·36 min
Joseph
Uses brick-building photos and minifigure scenes to make application security training memorable for end users.
owaspapplicationlearning+2
Talks·51 min
Adam Shaw
Explains how enterprise appsec teams get blocked by their own companies and what helps them succeed.
applicationmanagementteam+2
Talks·54 min
Surveys cloud security risks and maps AWS shared responsibility and compliance controls for organizations.
cloudawsrisk+3
Talks·45 min
Mike McCabe · Ken Toler
Shares lessons from securing cloud migrations at financial firms, covering infrastructure as code checks and basic controls.
cloudlessons-learnedinfrastructure+2
Talks·50 min
David Linder
Compares web application firewalls with runtime application self-protection and explains where each one fits in defense.
appsecwebapplication+2
Talks·51 min
Christian Burrows
Outlines a practical methodology for building, testing and reviewing detection rules, from naming to incident response.
detectionthreat-detectiondefensive-security+2
Talks·37 min
Walks through starting, funding, and retiring an OWASP open source project, from naming and licensing to project levels.
owaspopen-sourceproject+2
Talks·1 hr 3 min
Jeff
Argues that appsec should prove software is secure with evidence, and proposes security labels to restore buyer trust.
appsecrisktrust+2
Talks·40 min
Brad
Shows how to frame security spending requests in business terms so that management can judge and fund them.
riskmanagementteam+2
Talks·48 min
Shows how security teams can keep pace with cloud-native architectures that change release by release through infrastructure as code.
cloudinfrastructureautomation+2
Talks·35 min
Yash · Harini
Shows how Twilio's security team turned Jira data into automated, near real-time dashboards for different audiences.
riskmanagementvulnerabilities+2
Talks·51 min
Walks through the OWASP MASVS to show where mobile apps most often fail and how to test them.
mobileappsecowasp+2
Talks·50 min
Argues that security testing belongs in the developer's inner loop and offers a model for secure-by-design development.
appsecdeveloperapplication+2
Talks·57 min
Charisse Castagnoli
Explains how cyber insurance coverage, exclusions and privilege rules shape what a breach costs an organization.
riskincident-responseransomware+2
Talks·33 min
Patterns · Anti-patterns
Explores JWT use cases, common anti-patterns and safer alternatives for session and service-to-service authentication.
appsecidentityweb+2
Talks·45 min
Explains how to automate repetitive JavaScript application testing with static and dynamic tools and a staged methodology.
appsecwebautomation+2
Talks·46 min
David Ojo
Walks through privacy impact assessments, how they differ from security risk assessments, and where they fit in Privacy by Design.
privacyriskappsec+2
Talks·57 min
Jeff Williams
Shows how runtime instrumentation in Java can expose sensors for SQL, crypto, access control and expression injection.
appsecmonitoringapplication+2
Talks·53 min
Karen
Explains how a security team kept its controls working as a product organization moved from waterfall to scaled Agile with SAFe.
appsecdevelopmentlessons-learned+2
Talks·37 min
Cody Mafucci
Explains how to automate dynamic application security testing in pipelines, weighing trade-offs and running a live Docker demo.
appsecautomationweb+2