Writing Security unit integration Tests using the OWASP O2 Platform
summary
Shows how the O2 Platform (a .NET REPL/toolkit) turns security checks into executable tests: unit-to-end-to-end tests that run in real time with Wallaby and NCrunch, use Node/Electron for browser instrumentation, and integrate with Docker/Travis. Demonstrates the meta‑stream method extractor that builds attack‑surface trees and a standalone explorer in minutes, automates selenium-like UI checks, and finds a production‑scale bug (one article causes CPU/DoS). Claims tests replace most debugging, scales security automation, and the demo tools successfully reproduce and fix issues.
AI-written summary · about
chapters (25)
- 0:00Intro
- 2:50How to make application security scale
- 4:16Stack to Stack Traces
- 8:15Machine Correlation
- 8:40WebStorm
- 16:10Test Field Development
- 18:10Multiple Tests
- 19:54Pair Programming
- 27:17Oracle Platform
- 27:41MetaStreams Creator
- 30:40Static Analysis
- 32:22Sequel Injection
- 35:03Attack Surface
- 38:27Tools
- 44:11Write a Rap
- 46:15APIs
- 48:15API Designer
- 48:55Adding Files
- 50:27Adding Text Editor
- 51:01Adding Text Area
- 51:55Adding Web Browser
- 52:26Disable Autoexecution
- 52:43Package
- 53:08Standalone executable
- 53:33Storytime
related talks
44mShift-Left-Security with the Security Test Pyramid
55mPlants vs thieves: Automated Tests in the World of Web Security
55mAutomating Security Testing with the OWTF
27mHow to Start Security Testing Without Fear
57mShift Left Security with the Security Test Pyramid
43mSecurity Testing Tools: Can I Touch You There?
53mTest Driven Application Security
43mTest Driven Application Security