Top 10 That Actually Matter: Web, API, Mobile and LLM
summary
A practical session that examines recurring security mistakes in web apps, APIs and mobile from an OWASP Top 10 perspective, arguing these stem from everyday decisions under pressure rather than lack of knowledge. It presents concrete habits to fix them—clear "done" criteria, minimal pre-deploy security checks, and basic anomaly indicators—and demos quick fixes like access-rule corrections, replacing unsafe dependencies and hardening configs. It finishes with current risks for AI/LLM systems and lightweight controls to monitor and mitigate them without slowing delivery.
AI-written summary · about
chapters (11)
- 0:00Welcome
- 4:58About me and disclaimer
- 12:28API data leaks
- 15:17Mobile app security
- 21:59Common dev mistakes
- 27:35Insecure logs and storage
- 31:28Input validation and auth
- 34:15Injection and parameter tampering
- 37:08LLM and chatbot security
- 41:00AI in secure development
- 44:10Dev cycle integration
related talks
59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs
01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017
48mWeb Application Security
23mWeb Application Security - owasp top 10 vulnerabilities
59mPractical Security for Web Applications
30mTop 10 Introduction
28mSecuring LLMs: Insights into OWASP top 10
01h 03mTen Key Steps for Enhanced Web App Security