LASCON Talks & Presentations

LASCON

Comparing WAF and RASP - Why?

Explore the differences and complementary roles of WAF and RASP in application security, understanding their strengths and limitations for comprehensive protection.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

LASCON

API Security - Is it the New Application Attack Surface and How to Secure at Enterprise Scale

Explore API security challenges, threats, and enterprise-scale solutions. Learn about modern attack surfaces, recent breaches, and effective strategies for protecting sensitive data in API-driven architectures.

• YouTube
• 30 minutes
• On-Demand
• Conference Talk

LASCON

Privacy Impact Assessments - How Much Privacy Is Enough?

Explore privacy impact assessments, their methodologies, and how they differ from security risk assessments. Learn to model and measure privacy impacts for effective Privacy by Design implementation.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

LASCON

Your Frontier Defense - Understanding Web Application Firewalls

Explore WAF options, features, and challenges across cloud providers and self-managed solutions for enhanced web application security and defense-in-depth strategies.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

LASCON

Doing This One Crazy Thing Will Change Your AppSec Program Forever

Discover how to revolutionize your AppSec program through effective communication, prioritization, and innovative strategies for securing software development.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

LASCON

Developing and Managing an OWASP Project - Projects 101

Learn to create, manage, and grow an OWASP project. Explore naming, sponsorship, levels, services, and resources for successful open-source security initiatives.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

LASCON

Writing Policies That Aren't Miserable for Everyone Involved

Innovative approach to creating effective security policies that are easy to understand, implement, and comply with, improving overall organizational security and employee engagement.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

LASCON

Using the Threat Modeling Manifesto to Build an Enterprise Threat Modeling Program

Learn to build an enterprise threat modeling program using the Threat Modeling Manifesto. Discover key principles, benefits, and practical tips for implementing effective security practices across your organization.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

LASCON

The Final Frontier - Automating Dynamic Security Testing

Automating dynamic security testing: strategies for efficient, scalable DAST integration in software delivery pipelines, addressing challenges and trade-offs for seamless DevSecOps implementation.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

LASCON

Insiders Guide to Mobile AppSec with OWASP MASVS

Explore mobile app security essentials using OWASP MASVS, covering data storage, network issues, authentication, and anti-tampering. Learn practical tools and tactics for effective mobile pen testing and security assessment.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

LASCON

Detection Engineering Methodologies

Comprehensive methodology for engineering effective threat detections, covering structure, processes, and technologies for a successful detection program.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

LASCON

Being Powerful While Powerless - Elevating Security by Leading Without Authority

Strategies for implementing security measures and fostering a security-conscious culture as a lone security professional, emphasizing soft power, automation, and cross-departmental collaboration.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

LASCON

Reversing Client Side JavaScript Using the Chrome Dev Tools Protocol

Explore Chrome Dev Tools protocol for JavaScript reversal, bug finding, and vulnerability detection. Learn to modify web app behavior and automate pentesting tasks using Go-based plugins.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

LASCON

A Stratagem on Strategy - Rolling Testing into Product Testing

Explore integrating security testing into product testing strategies, enhancing coverage and aligning security with software requirements for more effective quality assurance in the SDLC.

• YouTube
• 57 minutes
• On-Demand
• Conference Talk

LASCON

Application Logging in the Era of GDPR

Explore application logging best practices in the GDPR era, covering security, privacy, data protection, and compliance recommendations for developers and operations teams.

• YouTube
• 54 minutes
• On-Demand
• Conference Talk