Hana Hou Panel

Security learns to sprint: DevSecOps - Tanya Janca

Bulletproof Shoes - Fikrie Yunaz, Nikki Brandt

Upstreaming Security to Rails - Neil Matatall

SDL at scale: growing security champions - Ryan O'boyle

A good first impression can work wonders: creating AppSec training that developers ❤ - Leif Dreizler

JavaScript Supply Chain Security - Adam Baldwin

Tips and tricks for effective vulnerability management - Pieter Okcers

Multi-party vulnerability response in/with OSS - Jorge Lopez

Bug Bounty Botox - Katie Moussouris

Evolving beyond the vulnerability whack-a-mole game - Jake Kouns

Visibility & Control: Addressing supply chain challenges - Bob Martin

Have you adapted your AppSec? - David Lindner

The truth about cookies, tokens and APIs - Phillipe de Ryck

Hana Hou Panel

s (software bill of materials) – the looming format skirmish - David nalley

Who wants a thousand free puppies? - Michael Scovetta

Shifting Product Security from FORCEFUL to RESOURCEFUL - Christine Gadsby

Trust & Safety Engineering @ GitHub - Lexi Galantino

Trusted types & the end of DOM XSS - Krzysztof Kotowicz

Content Security Policy: A successful mess between hardening and mitigation - Spagnuolo/Weichselbaum

The path to code provenance at uber - Matt Finifter, Debosmit Ray, Tony Ngo

How not to use OAuth - Dr. Fett

The seven habits of a highly effective DevSecOp - James Wickett

Recap and panel with Jeremiah Grossman, Troy Hunt, Gene Kim, Mike Arpaia