Jeff Williams
where else to find them
what they talk about
all 7 in the filters
where they keep going back
- AppSec California2 editions2014–2015
all 10 in the filters
on a stage with
- Ryan Berg2×
- Damon Edwardsonce
- James Wickettonce
all 7 in the filters
who talks about the same things
- Matt Tesauro19 talks
- James Wickett14 talks
- Alyssa Miller12 talks
- Tanya Janca30 talks
- Oleg Gryb2 talks
- Joshua Corman27 talks
| title | conference | date |
|---|---|---|
| Trusting Software: Runtime Protection Is The Third Alternative | Global AppSec Dublin 2023 | 2023-02-15 |
Argues that runtime protection (RASP) instruments apps at load time to add concrete checks — taint tracking, untrusted data boundary enforcement, sandboxing of… | ||
| Using IAST to Unlock the Benefits of DevSecOps | YOW! Melbourne 2022 | 2022-12-08 |
IAST adds bytecode/runtime instrumentation to the app server (think New Relic-style agents) to trace data flows and catch real exploits like SQL injection by… | ||
| Security Observability 101: Thinking Inside the Box! | Global AppSec US 2021 Virtual | 2021-11-08 |
Claims that runtime instrumentation exposes real behavior: an open source JOT Java Observability Toolkit lets teams add YAML sensors to Java apps at startup… | ||
| Standard Classification: Rough Consensus - An OWASP Story | OWASP 20th Anniversary 2021 | 2021-09-24 |
Claims that software security labels will fix market failure by making security visible and that prototypes plus dozens of studies and meetings with NIST and… | ||
| Jumpstarting Your DevSecOps Pipeline with IAST and RASP | OWASP AppSec Europe 2018 | 2018-07-02 |
Claims a working pipeline using free Community Edition IAST and RASP, where an IAST agent jar added to the app instruments code at runtime and reports real… | ||
| Supply Chain Anarchy - Trojaned Binaries in the Java Ecosystem | AppSec USA 2017 | 2017-09-19 |
Claims an automated pipeline that matches repositories, builds code, and runs a security diff across Java libraries, tolerating compiler noise so only real… | ||
| Fixing the Unfixable: Solving Pervasive Vulnerabilities with RASP | OWASP AppSec California 2016 | 2016-01-25 |
Claims a practical fix for Java deserialization by weaving security into running apps: a free open source RASP agent hooks the JVM, blocks ysoserial-style… | ||
| Why Your AppSec Experts Are Killing You | AppSec California 2015 | 2015-01-26 |
Argues that expert-led AppSec is a bottleneck and gives a concrete alternative: define an expected security model, deploy instrumentation-based testing… | ||
| Stop Chasing Vulnerabilities - Introducing Continuous Application Security | OWASP AppSecUSA 2014 | 2014-09-16 |
Recorded at AppSecUSA 2014 in Denver
http://2014.appsecusa.org/
Friday, September 19 • 1:00pm - 1:45pm
Stop Chasing Vulnerabilities - Introducing… | ||
| 11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey | OWASP AppSecUSA 2014 | 2014-09-16 |
Four-year survey covers 3,300 responses in April 2014 (11,000 total to date) and delivers hard numbers: 75% of organizations don’t enforce open-source… | ||
| Application Security at DevOps Speed and portfolio scale | AppSec California 2014 | 2014-01-27 |
Claims that instrumenting an entire IT organization with passive sensors yields real‑time, portfolio‑wide security visibility; prototypes include a… | ||
| AppSec at DevOps Speed and Portfolio Scale | AppSecUSA 2013 | 2013-11-20 |
Argues for instrumenting an entire IT organization with passive sensors that collect HTTP, data‑flow and control‑flow evidence to detect vulnerabilities in… | ||
| An Introduction to the Newest Addition to the OWASP Top 10 | AppSecUSA 2013 | 2013-11-20 |
OWASP A9 warns that component risk is concrete: Sonatype Central sees 8 billion requests annually and about 20 million downloads per week, and an analysis of… | ||
| nothing matches | ||