JWT Parkour - Louis Nyffenegger

Lightning Talk: DevSecOps enabled micro-perimeter API protection - Lukasz Radosz

Lightning Talk: RaiseMe Introduction - Lori Barfield

Introducing the OWASP Nettacker Project - Sam Stepanyan

Continuous Cloud Security Monitoring (CCSM) - Michael Wylie

Solving trust issues at scale - Omer Levi Hevroni

Lightning Talk: OAuth 2.0 Misimplementation, Vulnerabilities and Best Practices - Pak Foley

Lightning Talk: OWASP Project Showcase: Threat Model Cookbook - Jonathan Marcil

Machine Learning and Application Security: Evolution of Attack Detection - Kavya Pearlman

The State of Credential Stuffing and the Future of Account Takeovers - Jarrod Overson

Securing Third Party Apps in a Marketplace Ecosystem - Hariram Balasundaram & Jana Geddis

Kubernetes Security From The Trenches - Julien Sobrier

Lessons from the war zone to the cyber trenches, what leaders need to know - Chris Kubecka & JC Vega

What if we had TLS for Phone Numbers? An introduction to SHAKEN/STIR - Kelley Robinson

Dr. DevSecOps: Or How I stopped worrying about CI and started loving the cloud - Abhay Bhargav

Building Data Discovery and Classification at Scale - Elizabeth Nammour & Pinyao Guo

Who Dis? The Right Way to Authenticate - Lakshmi Sudheer & Dhivya Chandramouleeswaran

Protecting the Bridge from Dollars to Bitcoin: Securing Edge Payments Infrastructure - Nishil Shah

Open Source Developers Are Security’s New Front Line - Brian Fox

Do certain types of developers or teams write more secure code? - Anita D'Amico and Chris Horn

[In]secure deserialization, and how [not] to do it - Alexei Kojenov

Achieve AI-powered API Privacy using Open Source - Gianluca Brigandi

Are You Properly Using JWTs? - Dmitry Sotnikov

OWASP SAMM2 - your dynamic software security journey - Brian Glas

Web App Containers: Applied Threat Modeling - Richard Tychansky

Lightning Talk: Operationalizing our Open Source Security Scanner - Nikki Brandt & Oliver Grubin

Hacking Cryptocurrencies - Mark Nesbitt

Lightning Talk: Modern Web Security: The Art of Creating and Breaking Assertions - John Villamil

Owning the cloud through SSRF and PDF Generators - Ben Sadeghipour and Chris Holt

More Than Turbulence - Chris Kubecka

Choosing the right static code analyzers based on hard data - Chris Horn

How do JavaScript frameworks impact the security of applications? - Ksenia Peguero

Scaling Up Is Hard To Do - The Threat Modeling Cover - Allison Schoenfield & Izar Tarandach

Car Hacking: Security Analysis of an In-Vehicle-Infotainment System and App Platform - Sahar Mazloom

An Opinionated Guide to Scaling Your Company's Security - Clint Gibler

Diversity by Design: Securing the Cyber Workforce Development Lifecycle - Panel

From the OWASP Top Ten(s) to the OWASP ASVS - Jim Manico

Practical OWASP CRS in High Security Settings - Christian Folini

The Security Phoenix from the ashes of DevOps - Francesco Cipollone

Lightning Talk: Purple is the new black: Modern Approaches to Application Security - Tanya Janca

AppSecCali 2020 Closing Keynote: Browser Manipulation for Bypassing Firewalls - Samy Kamkar

AppSecCali 2020 Friday Opening Keynote: Attribution - Taiye Lambo

AppSecCali 2020 Thursday Closing Keynote - Eva Galperin

AppSecCali 2020 Thursday Welcome Address - Richard Greenberg

AppSecCali 2020 Opening Keynote - Alex Stamos

AppSecCali 2019 Slide Show