Attack Your Apps Before the Bad Guys Do
summary
This talk explains how to build security into the software development lifecycle (SDL) for web APIs and mobile apps, so vulnerabilities are found and mitigated before attackers do. It covers concrete topics and tools: security requirements, secure design, threat modeling, the OWASP Top Ten, security testing including fuzzing, and secure deployment, with a practical, experience-based approach to harden applications.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 4:36Need for security
- 7:05Cost of fixing flaws
- 13:23Secure dev training
- 15:09Threat modeling
- 18:37Secure code review
- 21:48API security testing
- 27:44Mobile attack vectors
- 30:29Mobile app tools
- 35:24Demo: MobSF analysis
- 40:39User protection savings
- 41:20Incident management
- 43:26Bug bounty programs
- 45:13Summary
related talks
59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMs
38mI just hacked your app!
38mPrioritizing Trust While Creating Applications
58mHackers vs Developers: Mobile Applications
48mSecurity Basics for Developers (and Not Only Developers)
46mMobile AppSec from an attacker's perspective
23mWeb Application Security - owasp top 10 vulnerabilities
45mTop 10 That Actually Matter: Web, API, Mobile and LLM