App Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
summary
OWASP packages practical assets: Top 10 vulnerability lists with “how to prevent” sections, one‑page cheat sheets, and hands‑on apps like Juice Shop (deliberately insecure, perfect for CTFs) plus testing tools such as ZAP for local scans. The talk cites measurable scale—over 10 million secrets discovered on public GitHub in 2022—and notes ~250 OWASP projects (about 157 usable, 18 flagship). Community meetups, SecureFlag training, and open repos let teams adopt and test specific fixes quickly.
AI-written summary · about
chapters (9)
- 0:00Start
- 12:04OWASP Mission
- 12:14OWASP Overview
- 12:42OWASP Projects
- 14:18OWASP Flagship Projects
- 14:44OWASP Lab Projects
- 14:56OWASP Incubator Projects
- 20:19OWASP Events
- 21:03OWASP Education And Training
related talks
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
38mFree security resources that your competitors use!
42mBuilding an AppSec Program with a Budget of $0: Beyond the OWASP Top 10
45mLeveraging Projects and Tools to Transform Your SDLC
45mOWASP for Developers
26mOpenSec and Why WebAppSec Matters
27mHow to Start Security Testing Without Fear