OWASP AppSec Days Singapore 2024

In an era where digital transformation is accelerating, our future is being written, "coded", by the decisions we make today. But securing this future requires more than just traditional security measures; it demands the ingenuity of hackers and the power of community-driven collaboration. This keynote explores how the hacker mindset and community innovation are key to embedding security into the very DNA of our digital infrastructure. By leveraging the creativity, curiosity, and collaborative spirit of the hacking community, we can craft a resilient digital future where security is not an afterthought but a fundamental element. This talk will challenge you to rethink how we approach security, empowering hackers and communities to shape a safer, more secure digital world—one line of code at a time.

The web browser is the most used enterprise application, but the least protected. For almost two decades, Secure Web Gateways, as part of SASE / SSE framework, served as the primary defence against web threats by monitoring the network layer. However, as browsers have evolved into complex, OS-like environments and web applications have grown in intricacies, Secure Web Gateways have become outdated and ineffective. In this keynote, we we will expose the inherent architectural flaws of Secure Web Gateways, particularly their inability to defend against modern web attacks like 'Last Mile Reassembly attacks.' The argument is clear: Secure Web Gateways are no longer viable as the guardian of the web. The future of web security lies in browser-native solutions that operate directly within the browser, leveraging rich browser data to drive advanced web attack detection algorithms.