Global AppSec DC 2019

Attending this event?

Global AppSec DC 2019

Registration is NOW Open
Marriott Wardman Park
2660 Woodley Rd NW
Washington DC, District of Columbia 20008 USA
Phone: 1-202-328-2000
Book Now
*discount rates expire August 19, 2019

9:00am

HoneyDB WorkshopPhillip Maddux A Builder’s Guide to Single Page Application SecurityPhilippe De Ryck Attacking and Defending Containerized Apps and Serverless TechNithin Jois • Sudarshan Narayanan • Tilak Thimmappa Seth & Ken’s Excellent Adventures in Secure Code ReviewSeth Law • Ken Johnson Using the OWASP Application Security Verification Standard 4.0 to Secure Your ApplicationsAndrew van der Stock

10:00am

AM Coffee Break

12:30pm

Lunch

3:00pm

PM Coffee Break

9:00am

Secure Coding with the OWASP Top TenJim Manico

10:00am

AM Coffee Break

12:30pm

Lunch

3:00pm

PM Coffee Break

9:00am

Building an AppSec Program with OWASPChris Romeo DevSecOps - Automating Security in DevOpsSumit Siddharth • Rohit Salecha Women In AppSec - Web Application Penetration Training - (No charge )LIMITEDNicole Becher • Vandana Verma

10:00am

AM Coffee Break

12:30pm

Lunch

3:00pm

PM Coffee Break

5:00pm

Welcome Reception

8:00am

Capture the Flag - CMD+CTRL Web Application Cyber RangeKevin Poniatowski

8:45am

Opening Remarks

9:00am

Applying Security Engineering Principles to Complex Composite Systems TBANeal Ziring

10:00am

AM Coffee Break Members Lounge

10:30am

A Structured Code Audit Approach to Find Flaws in Highly Audited Webapps TBASimon Scannell Non-Political Security Learnings from the Mueller Report TBAArkadiy Tetelman Security & Chaos Engineering: A Novel Approach to Crafting Secure and Resilient Distributed Systems TBAAaron Rinehart Securing Serverless by Breaking-in TBAHayley Denbraver Secure Medical Device Deployment StandardChristopher Frenz Owning the Cloud through SSRF and PDF Generators TBABen Sadeghipour

11:30am

OWASP Find Security Bugs: The community static code analyzer TBAPhilippe Arteau Insider Threat Assessments: A methodology for improving insider threat deterrence and detection TBABen Stewart Shift left, shift right, or run security right through the middle? TBAMeera Rao Cryptocoin Miners vs Machine Learning TBAJonn Callahan Secure Coding DojoPaul Ionescu Security's Digital Transformation TBAMichele Chubirka

12:30pm

Lunch

2:00pm

Making a Change, One at a time - Diversity: More than just Gender TBAVandana Verma

3:00pm

PM Coffee Break

3:30pm

Building Secure Password-less Web Applications using WebAuthn TBAKrishna Chaitanya Telikicherla • Murali Vadakke Puthanveetil Securing Modern Applications: The Data Behind DevSecOps TBADerek Weeks Building Secure React Applications TBARon Perris • Jim Manico Quantifying the Security Benefits of Debloating Web Applications TBABabak Amin Azad API Security ProjectInon Shkedy • Erez Yalon Beyond data-at-rest: Advances in Native NoSQL Database Encryption TBAKenneth White

4:30pm

Running FaaS with Scissors TBAMatt Tesauro A Case Study in Scaling Oversight TBAMike Samuel The As, Bs, and Four Cs of Testing Cloud-Native Applications TBADan Cornell Fighting Formjacking and Magecart - Separating fact from fiction TBAAvital Grushcovski What Do Hackers Want from Bounty Programs? TBAYakov Shafranovich

5:30pm

Networking Event

6:00pm

Leaders Meeting

8:00am

Capture the Flag - CMD+CTRL Web Application Cyber RangeKevin Poniatowski

9:00am

Talent matters. You matter. TBACaroline Wong

10:00am

AM Coffee Break Members Lounge

10:30am

A Purple Team View of Serverless and GraphQL Applications TBAAbhay Bhargav OWASP Serverless Top 10 TBATal Melamed 0 to 1 Startup SecurityColeen Coolidge SSO Wars: The Token Menace TBAAlvaro Muñoz • Oleksandr Mirosh Dependency CheckJeremy Long Keys Under Doormats: Problems and Solutions for Securely Storing Credentials in Web Applications TBARon Craig • Dmitriy Beryoza

11:30am

How to Build an AppSec Training Program That Isn’t Boring TBABrice Williams A Practical Guide to Complying with SB-327 (Information Privacy of Connected Devices) TBAFarbod H Foomany A Day in the Life of IoT Security ArchitectPraveena Sridhar Farewell, WAF - Exploiting SQL Injection from Mutation to PolymorphismBoik Su SAMMHardik Parekh • John Ellingsworth Common API Security Pitfalls TBAPhilippe De Ryck

12:30pm

Lunch

2:00pm

A DevSecOps Tale of Business, Engineering, and People TBAJames Wickett

3:00pm

PM Coffee Break

3:30pm

Threat Modeling with Flow Diagrams TBAJonathan Marcil Salesforce Data Governance: What dark secrets lurk in your instance? TBAPatrick Fields How to Fix the Diversity Gap in CybersecurityChloe Messdaghi Who Dis? The Right Way to Authenticate TBADhivya Chandramouleeswaran • Lakshmi Sudheer SEDATEDDennis Kennedy The Security We Need: Designing Usable IoT Security TBADamilare Fagbemi

4:30pm

The Zest of ZAP: How scripting in our favorite tool can bridge the gap between dev teams and securityPeter Hauschulz Pilots, Surgeons and Developers - Improving Application Security With Checklists TBAJoe Kuemerle DevSecOps: Essential Pipeline Tooling to Enable Continuous SecurityRichard Mills IoT AppSec: Automatic Security Analysis of IoT Firmware TBAMatt Brown Defect DojoMatt Tesauro Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center TBAAmol Sarwate

5:15pm

Closing Remarks