ConTalks
Talks
Events

Global AppSec Amsterdam 2019

Talks

Image thumbnail for talk Knative Security Pipelines
43:11

Knative Security Pipelines

Spyros Gasteratos

Image thumbnail for talk Do Certain Types Of Developers Or Teams Write More Secure Code?
43:26

Do Certain Types Of Developers Or Teams Write More Secure Code?

Anita Damico

Image thumbnail for talk The Insecurity Caused By Trusting Your Client-Side Storage
40:53

The Insecurity Caused By Trusting Your Client-Side Storage

Marius Steffens, Ben Stock

Image thumbnail for talk Opening Remarks
05:54

Opening Remarks

Global AppSec Crew

Image thumbnail for talk The Security We Need: Designing Usable IoT Security
41:56

The Security We Need: Designing Usable IoT Security

Damilare D. Fagbemi

IoT

Image thumbnail for talk The Woman Who Squashed Terrorists: When An Embassy Gets Hacked
34:46

The Woman Who Squashed Terrorists: When An Embassy Gets Hacked

Chris Kubecka

Image thumbnail for talk Being Powerful While Powerless: Elevating Security By Leading Without Authority
39:03

Being Powerful While Powerless: Elevating Security By Leading Without Authority

Nathan Yee

Image thumbnail for talk ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices
38:49

ScriptProtect: Mitigating Unsafe Third-Party JavaScript Practices

Martin Johns, Marius Musch

JavaScript

Image thumbnail for talk How Do JavaScript Frameworks Impact The Security Of Applications?
34:19

How Do JavaScript Frameworks Impact The Security Of Applications?

Ksenia Peguero

JavaScript

Image thumbnail for talk Web Apps vs Blockchain DApps (Smart Contracts): Tools, Vulns And Standards
39:51

Web Apps vs Blockchain DApps (Smart Contracts): Tools, Vulns And Standards

Damian Rusinek

Blockchain

Image thumbnail for talk The State Of Credential Stuffing And The Future Of Account Takeovers
41:02

The State Of Credential Stuffing And The Future Of Account Takeovers

Jarrod Overson

Image thumbnail for talk Unlikely Allies: How HR Can Help Build A Security-First Culture
44:03

Unlikely Allies: How HR Can Help Build A Security-First Culture

Alison Eastaway

Image thumbnail for talk Securing The Future
45:11

Securing The Future

Mikko Hypponen

Image thumbnail for talk Restricting The Scripts, You're To Blame, You Give CSP A Bad Name
46:31

Restricting The Scripts, You're To Blame, You Give CSP A Bad Name

Sebastian Roth, Ben Stock

Image thumbnail for talk Breaches Are Everywhere. What’s A Good Security Leader To Do?!
45:51

Breaches Are Everywhere. What’s A Good Security Leader To Do?!

Richard Greenberg

Image thumbnail for talk The Now And The Future Of Malicious WebAssembly
31:04

The Now And The Future Of Malicious WebAssembly

Marius Musch

WebAssembly

Image thumbnail for talk OWASP SAMM2: Your Dynamic Software Security Journey
46:16

OWASP SAMM2: Your Dynamic Software Security Journey

Sebastien Deleersnyder

Image thumbnail for talk How To Learn (And Teach) Hacking
44:38

How To Learn (And Teach) Hacking

Ruben Gonzalez

Image thumbnail for talk SUSTO: Systematic Universal Security Testing Orchestration
43:06

SUSTO: Systematic Universal Security Testing Orchestration

Luis Saiz

Image thumbnail for talk Five Key Trends In Application Security
36:52

Five Key Trends In Application Security

Ameya Talwalkar

Image thumbnail for talk OWASP Based Threat Modelling: Creating A Feedback Model In An Agile Environment
44:25

OWASP Based Threat Modelling: Creating A Feedback Model In An Agile Environment

Chaitanya Bhatt

Image thumbnail for talk OWASP Docker Top 10
49:58

OWASP Docker Top 10

Dirk Wetter

Docker

Image thumbnail for talk Exploiting Hardware Glitches And Side Channels In Perfect Software
51:09

Exploiting Hardware Glitches And Side Channels In Perfect Software

Herbert Bos

Image thumbnail for talk An Infosec Timeline: Noteworthy Events From 1970 To 2050
1:01:43

An Infosec Timeline: Noteworthy Events From 1970 To 2050

Mario Heiderich

Image thumbnail for talk How I Could Have Stolen Your Photos From Google
28:01

How I Could Have Stolen Your Photos From Google

Gergo Turcsanyi

Image thumbnail for talk Secure Agile Development According To SAMM
34:04

Secure Agile Development According To SAMM

Rob Van Der Veer

Image thumbnail for talk Mobile- Or Attacker-Friendly? A Security Evaluation Of Mobile-First Websites
45:37

Mobile- Or Attacker-Friendly? A Security Evaluation Of Mobile-First Websites

Tom Van Goethem

Image thumbnail for talk Security Vulnerabilities Decomposition: Another Way To Look At Vulnerabilities
41:02

Security Vulnerabilities Decomposition: Another Way To Look At Vulnerabilities

Katy Anton

Image thumbnail for talk Threat Modelling Stories From The Trenches
46:44

Threat Modelling Stories From The Trenches

David Johannson, Andrew Lee-Thorp

Image thumbnail for talk HTTP Desync Attacks: Smashing Into The Cell Next Door
44:41

HTTP Desync Attacks: Smashing Into The Cell Next Door

James Kettle

Image thumbnail for talk Fast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide
45:27

Fast Forwarding Mobile Security With The OWASP Mobile Security Testing Guide

Jeroen Willemsen

Image thumbnail for talk Closing Remarks
02:19

Closing Remarks

Global AppSec Crew

Image thumbnail for talk How Scripting In ZAP Can Bridge The Gap Between Dev Teams And Security
40:55

How Scripting In ZAP Can Bridge The Gap Between Dev Teams And Security

Peter Hauschulz

Image thumbnail for talk How To Find And Prevent Entire Classes Of Security Vulnerabilities
33:51

How To Find And Prevent Entire Classes Of Security Vulnerabilities

Sam Lanning

Image thumbnail for talk Modern And Secure IAM For Modern Applications
32:17

Modern And Secure IAM For Modern Applications

Vinod Anandan

Image thumbnail for talk Choosing The Right Static Code Analyzers Based On Hard Data
40:25

Choosing The Right Static Code Analyzers Based On Hard Data

Chris Horn

Image thumbnail for talk Attacking AWS: The Full Cyber Kill Chain
45:59

Attacking AWS: The Full Cyber Kill Chain

Pawel Rzepa

AWS

Image thumbnail for talk Practical OWASP CRS In High Security Settings
41:29

Practical OWASP CRS In High Security Settings

Christian Folini

Image thumbnail for talk [In]secure Deserialization, And How [Not] To Do It
39:50

[In]secure Deserialization, And How [Not] To Do It

Alexei Kojenov

Image thumbnail for talk WebAuthn: Strong Authentication vs Privacy vs Convenience
44:09

WebAuthn: Strong Authentication vs Privacy vs Convenience

Suby Raman

Image thumbnail for talk Controlled Mayhem With Cloud Native Security Pipelines
39:28

Controlled Mayhem With Cloud Native Security Pipelines

Ben Pick