Global AppSec DC 2019 has ended

Create Your Own Event

Global AppSec DC 2019

Registration is NOW Open
Marriott Wardman Park
2660 Woodley Rd NW
Washington DC, District of Columbia 20008 USA
Phone: 1-202-328-2000
Book Now
*discount rates expire August 19, 2019

8:00am

Registration Atrium

9:00am

A Builder’s Guide to Single Page Application Security Lincoln 3Philippe De Ryck Attacking and Defending Containerized Apps and Serverless Tech Lincoln 2Sudarshan Narayanan • Nithin Jois • Tilak Thimmappa Seth & Ken’s Excellent Adventures in Secure Code Review Lincoln 5Seth Law • Ken Johnson Using the OWASP Application Security Verification Standard 4.0 to Secure Your Applications Lincoln 6Andrew van der Stock

10:00am

AM Coffee Break Exhibit Hall C

12:30pm

Lunch Exhibit Hall C

3:00pm

PM Coffee Break Exhibit Hall C

8:00am

Registration Atrium

9:00am

Secure Coding with the OWASP Top Ten Lincoln 4Jim Manico

10:00am

AM Coffee Break Exhibit Hall C

12:30pm

Lunch Exhibit Hall C

3:00pm

PM Coffee Break Exhibit Hall C

9:00am

Registration Atrium Project Review BuchananHarold Blankenship Building an AppSec Program with OWASP Lincoln 3Chris Romeo DevSecOps - Automating Security in DevOps Lincoln 2Sumit Siddharth • Rohit Salecha Women In AppSec - Web Application Penetration Training - (No charge ) Lincoln 5FILLINGNicole Becher • Vandana Verma

10:00am

AM Coffee Break Exhibit Hall C

12:30pm

Lunch Exhibit Hall C

3:00pm

PM Coffee Break Exhibit Hall C

5:00pm

Welcome Reception Exhibit C

6:30pm

Security Compass present Global AppSec Welcome Party Stones Throw Restaurant - Marriott

7:30am

Registration Atrium

8:00am

Capture the Flag - CMD+CTRL Web Application Cyber Range Virginia BKevin Poniatowski

8:45am

Opening Remarks Salon 2

9:00am

Applying Security Engineering Principles to Complex Composite Systems Salon 2Neal Ziring

10:00am

AM Coffee Break Exhibit Hall C Members Lounge Atrium

10:30am

A Structured Code Audit Approach to Find Flaws in Highly Audited Webapps Lincoln 2Simon Scannell Non-Political Security Learnings from the Mueller Report Lincoln 3Arkadiy Tetelman Security & Chaos Engineering: A Novel Approach to Crafting Secure and Resilient Distributed Systems Lincoln 6Aaron Rinehart Securing Serverless by Breaking-in Lincoln 4Hayley Denbraver Secure Medical Device Deployment Standard Virginia AChristopher Frenz Owning the Cloud through SSRF and PDF Generators Lincoln 5Ben Sadeghipour

11:30am

OWASP Find Security Bugs: The community static code analyzer Lincoln 2Philippe Arteau Insider Threat Assessments: A methodology for improving insider threat deterrence and detection Lincoln 3Ben Stewart Shift left, shift right, or run security right through the middle? Lincoln 6Meera Rao Cryptocoin Miners vs Machine Learning Lincoln 4Jonn Callahan Secure Coding Dojo Virginia APaul Ionescu DevSecOps: Essential Pipeline Tooling to Enable Continuous Security Lincoln 5Richard Mills

12:30pm

Lunch Exhibit Hall C

2:00pm

Making a Change, One at a time - Diversity: More than just Gender Salon 2Vandana Verma

3:00pm

PM Coffee Break Exhibit Hall C

3:30pm

Building Secure Password-less Web Applications using WebAuthn Lincoln 2Krishna Chaitanya Telikicherla • Murali Vadakke Puthanveetil Securing Modern Applications: The Data Behind DevSecOps Lincoln 3Derek Weeks Building Secure React Applications Lincoln 6Jim Manico • Ron Perris Quantifying the Security Benefits of Debloating Web Applications Lincoln 4Babak Amin Azad API Security Project Virginia AInon Shkedy • Erez Yalon Beyond data-at-rest: Advances in Native NoSQL Database Encryption Lincoln 5Kenneth White

4:30pm

Running FaaS with Scissors Lincoln 2Matt Tesauro A Case Study in Scaling Oversight Lincoln 3Mike Samuel The As, Bs, and Four Cs of Testing Cloud-Native Applications Lincoln 6Dan Cornell Fighting Formjacking and Magecart - Separating fact from fiction Lincoln 4Avital Grushcovski What Do Hackers Want from Bounty Programs? Lincoln 5Yakov Shafranovich

5:30pm

Networking Event Exhibitor Hall C

6:00pm

Leaders Meeting Lincoln 2

7:30am

Registration Atrium

8:00am

Capture the Flag - CMD+CTRL Web Application Cyber Range Virginia BKevin Poniatowski

9:00am

Talent matters. You matter. Salon 2Caroline Wong

10:00am

AM Coffee Break Exhibit Hall C Members Lounge Atrium

10:30am

A Purple Team View of Serverless and GraphQL Applications Lincoln 2Abhay Bhargav OWASP Serverless Top 10 Lincoln 3Tal Melamed 0 to 1 Startup Security Lincoln 6Coleen Coolidge SSO Wars: The Token Menace Lincoln 4Alvaro Muñoz • Oleksandr Mirosh Dependency Check Virginia AJeremy Long Keys Under Doormats: Problems and Solutions for Securely Storing Credentials in Web Applications Lincoln 5Dmitriy Beryoza • Ron Craig

11:30am

How to Build an AppSec Training Program That Isn’t Boring Lincoln 2Brice Williams A Practical Guide to Complying with SB-327 (Information Privacy of Connected Devices) Lincoln 3Farbod H Foomany A Day in the Life of IoT Security Architect Lincoln 6Praveena Sridhar Farewell, WAF - Exploiting SQL Injection from Mutation to Polymorphism Lincoln 4Boik Su SAMM Virginia AJohn Ellingsworth • Hardik Parekh Common API Security Pitfalls Lincoln 5Philippe De Ryck

12:30pm

Lunch Exhibit Hall C

2:00pm

A DevSecOps Tale of Business, Engineering, and People Salon 2James Wickett

3:00pm

PM Coffee Break Exhibit Hall C

3:30pm

Threat Modeling with Flow Diagrams Lincoln 2Jonathan Marcil Salesforce Data Governance: What dark secrets lurk in your instance? Lincoln 3Patrick Fields How to Fix the Diversity Gap in Cybersecurity Lincoln 6Chloe Messdaghi Who Dis? The Right Way to Authenticate Lincoln 4Dhivya Chandramouleeswaran • Lakshmi Sudheer SEDATED Virginia ADennis Kennedy Swimming with the kubectl fish: the why, the how, the what of the CNCF Kubernetes Assessment Lincoln 5Stefan Edwards

4:30pm

The Zest of ZAP: How scripting in our favorite tool can bridge the gap between dev teams and security Lincoln 2Peter Hauschulz Pilots, Surgeons and Developers - Improving Application Security With Checklists Lincoln 3Joe Kuemerle Testing with your left foot forward Lincoln 6Jeremy Long IoT AppSec: Automatic Security Analysis of IoT Firmware Lincoln 4Matt Brown Defect Dojo Virginia AMatt Tesauro Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center Lincoln 5Amol Sarwate