Abstract:Our customers are constantly battling automated attacks against their applications.  Retail Fraud, Romance Scams, Account Take Over and many other problems can arise from simple security mistakes.  In this talk I take a look at Billions of Transactions and break down the mistakes that allowed for automated attacks to flourish, and how we stopped them.

2021 marks the 20th Anniversary of the OWASP Foundation.

We have been working hard to secure the world through challenges and discovery. And now, it’s time to celebrate! Many of you have played a crucial role in the Foundation’s enduring history, and we encourage you to participate in the celebration coming this September! Our theme, Securing the Next 20 Years, is encouraging and exciting as we look ahead to the next 20 years!

Join us for FREE at this live, virtual 24-hour global event as we honor the past, celebrate the present and embrace the future of OWASP and cybersecurity. Hear from world renowned keynotes and special speakers, network with your peers and interact with our event sponsors.

Common Application Security Mistakes that Enable Automated Attacks

Conference: OWASP 20th Anniversary Event

Authors: Jason Kent

Abstract

Post a comment

Related work

Preventing subdomain takeover with OWASP Domain Protect

Whispers Among the Stars: A Practical Look at Perpetrating (and Preventing) Satellite Eavesdropping Attacks

Simple Spyware: Androids Invisible Foreground Services and How to (Ab)use Them

Bradley Horowitz: Lessons Scaling Billion-User Apps at Google

Exploiting CSP in WebKit to Break Authentication and Authorization

Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks