Mastering Web Security: Myths, Strategies & More! • Scott Helme & Sebastian Brandes

GOTO - Today, Tomorrow and the Future

This interview was recorded at GOTO Copenhagen for GOTO Unscripted.
http://gotopia.tech

Read the full transcription of this interview here

Scott Helme - Security Researcher, Hacker & Founder of Report URI & Security Headers
Sebastian Brandes - Senior Principal Product Manager at F5
RESOURCES
Scott
https://twitter.com/Scott_Helme
https://linkedin.com/in/scotthelme
https://scotthelme.co.uk
https://github.com/ScottHelme

Sebastian
https://twitter.com/br4ndes
https://www.linkedin.com/in/sebastianbk
https://github.com/sebastianbk

Links
Sebastian: https://youtu.be/BX0TVzHOJgQ
https://crawler.ninja
https://docs.report-uri.com/setup/wizard
Scott: https://youtu.be/K9MwaSRdA94
https://research.checkpoint.com/2019/hacking-fortnite
Troy: https://youtu.be/pxPEdUFdayA
Jim: https://youtu.be/nvzMN5Z8DJI
Scott pt. 1: https://youtu.be/zvCXUozuI2A
Scott pt. 2: https://youtu.be/8PlCfYflz_A
DESCRIPTION
Get deep into the realm of application security, debunking myths around filters and emphasizing the power of a comprehensive defense strategy. Sebastian Brandes and Scott Helme share practical tips, highlight valuable resources, and underscore the critical role of organizational commitment in securing applications effectively.
Watch this interview to revamp your security approach with their actionable insights!
RECOMMENDED BOOKS
Liz Rice • Container Security
Andy Greenberg • Tracers in the Dark
Thomas J. Holt, Adam M. Bossler & Kathryn C. Seigfried-Spellar • Cybercrime and Digital Forensics
Aaron Parecki • OAuth 2.0 Simplified
Erdal Ozkaya • Cybersecurity: The Beginner's Guide

Twitter
Instagram
LinkedIn
Facebook
Looking for a unique learning experience?
Attend the next GOTO conference near you! Get your ticket: gotopia.tech
SUBSCRIBE TO OUR YOUTUBE CHANNEL - new videos posted daily!

Chapters

1. Intro (00:00:00)

2. Unveiling web security vulnerabilities (00:01:11)

3. Securing the modern web: Strategies & challenges (00:05:25)

4. Beyond boundaries: Securing shadow IT & legacy apps (00:15:00)

5. The fallacy of filters: A false sense of security (00:23:07)

6. Training strategies in AppSec: Balancing automation & education (00:28:01)

7. Outro (00:32:00)