OWASP AppSec Days India 2024 (Virtual)

User-hardening efforts have made barely any progress compared to software-hardening efforts over the last years." - Sebastian Porst, in response to the Grugq.

For most organisations, cybersecurity is a pass-the-parcel problem across CISOs, IT, developers and vendors. In the end, the parcel lands in the hands of the user.

This talk explores the gap in thought between the owners, the defenders and the users of today's business applications and what needs to be done to bridge it. We shall present proactive steps and measures to overcome the last hurdle in building defendable systems.