Loading…
Registration is NOW Open
Marriott Wardman Park
2660 Woodley Rd NW
Washington DC, District of Columbia 20008 USA
Phone: 1-202-328-2000 
Book Now 
*discount rates expire August 19, 2019

Sign up or log in to bookmark your favorites and sync them to your phone or calendar.

Monday, September 9
 

8:00am

Registration Atrium

9:00am

A Builder’s Guide to Single Page Application Security Lincoln 3 Attacking and Defending Containerized Apps and Serverless Tech Lincoln 2 Seth & Ken’s Excellent Adventures in Secure Code Review Lincoln 5 Using the OWASP Application Security Verification Standard 4.0 to Secure Your Applications Lincoln 6

10:00am

AM Coffee Break Exhibit Hall C

12:30pm

Lunch Exhibit Hall C

3:00pm

PM Coffee Break Exhibit Hall C
 
Tuesday, September 10
 

8:00am

Registration Atrium

9:00am

Secure Coding with the OWASP Top Ten Lincoln 4

10:00am

AM Coffee Break Exhibit Hall C

12:30pm

Lunch Exhibit Hall C

3:00pm

PM Coffee Break Exhibit Hall C
 
Wednesday, September 11
 

9:00am

Registration Atrium Project Review Buchanan Building an AppSec Program with OWASP Lincoln 3 DevSecOps - Automating Security in DevOps Lincoln 2 Women In AppSec - Web Application Penetration Training - (No charge ) Lincoln 5FILLING

10:00am

AM Coffee Break Exhibit Hall C

12:30pm

Lunch Exhibit Hall C

3:00pm

PM Coffee Break Exhibit Hall C

5:00pm

Welcome Reception Exhibit C

6:30pm

Security Compass present Global AppSec Welcome Party Stones Throw Restaurant - Marriott
 
Thursday, September 12
 

7:30am

Registration Atrium

8:00am

Capture the Flag - CMD+CTRL Web Application Cyber Range Virginia B

8:45am

Opening Remarks Salon 2

9:00am

Applying Security Engineering Principles to Complex Composite Systems Salon 2

10:00am

AM Coffee Break Exhibit Hall C Members Lounge Atrium

10:30am

A Structured Code Audit Approach to Find Flaws in Highly Audited Webapps Lincoln 2 Non-Political Security Learnings from the Mueller Report Lincoln 3 Security & Chaos Engineering: A Novel Approach to Crafting Secure and Resilient Distributed Systems Lincoln 6 Securing Serverless by Breaking-in Lincoln 4 Secure Medical Device Deployment Standard Virginia A Owning the Cloud through SSRF and PDF Generators Lincoln 5

11:30am

OWASP Find Security Bugs: The community static code analyzer Lincoln 2 Insider Threat Assessments: A methodology for improving insider threat deterrence and detection Lincoln 3 Shift left, shift right, or run security right through the middle? Lincoln 6 Cryptocoin Miners vs Machine Learning Lincoln 4 Secure Coding Dojo Virginia A DevSecOps: Essential Pipeline Tooling to Enable Continuous Security Lincoln 5

12:30pm

Lunch Exhibit Hall C

2:00pm

Making a Change, One at a time - Diversity: More than just Gender Salon 2

3:00pm

PM Coffee Break Exhibit Hall C

3:30pm

Building Secure Password-less Web Applications using WebAuthn Lincoln 2 Securing Modern Applications: The Data Behind DevSecOps Lincoln 3 Building Secure React Applications Lincoln 6 Quantifying the Security Benefits of Debloating Web Applications Lincoln 4 API Security Project Virginia A Beyond data-at-rest: Advances in Native NoSQL Database Encryption Lincoln 5

4:30pm

Running FaaS with Scissors Lincoln 2 A Case Study in Scaling Oversight Lincoln 3 The As, Bs, and Four Cs of Testing Cloud-Native Applications Lincoln 6 Fighting Formjacking and Magecart - Separating fact from fiction Lincoln 4 What Do Hackers Want from Bounty Programs? Lincoln 5

5:30pm

Networking Event Exhibitor Hall C

6:00pm

Leaders Meeting Lincoln 2
 
Friday, September 13
 

7:30am

Registration Atrium

8:00am

Capture the Flag - CMD+CTRL Web Application Cyber Range Virginia B

9:00am

Talent matters. You matter. Salon 2

10:00am

AM Coffee Break Exhibit Hall C Members Lounge Atrium

10:30am

A Purple Team View of Serverless and GraphQL Applications Lincoln 2 OWASP Serverless Top 10 Lincoln 3 0 to 1 Startup Security Lincoln 6 SSO Wars: The Token Menace Lincoln 4 Dependency Check Virginia A Keys Under Doormats: Problems and Solutions for Securely Storing Credentials in Web Applications Lincoln 5

11:30am

How to Build an AppSec Training Program That Isn’t Boring Lincoln 2 A Practical Guide to Complying with SB-327 (Information Privacy of Connected Devices) Lincoln 3 A Day in the Life of IoT Security Architect Lincoln 6 Farewell, WAF - Exploiting SQL Injection from Mutation to Polymorphism Lincoln 4 SAMM Virginia A Common API Security Pitfalls Lincoln 5

12:30pm

Lunch Exhibit Hall C

2:00pm

A DevSecOps Tale of Business, Engineering, and People Salon 2

3:00pm

PM Coffee Break Exhibit Hall C

3:30pm

Threat Modeling with Flow Diagrams Lincoln 2 Salesforce Data Governance: What dark secrets lurk in your instance? Lincoln 3 How to Fix the Diversity Gap in Cybersecurity Lincoln 6 Who Dis? The Right Way to Authenticate Lincoln 4 SEDATED Virginia A Swimming with the kubectl fish: the why, the how, the what of the CNCF Kubernetes Assessment Lincoln 5

4:30pm

The Zest of ZAP: How scripting in our favorite tool can bridge the gap between dev teams and security Lincoln 2 Pilots, Surgeons and Developers - Improving Application Security With Checklists Lincoln 3 Testing with your left foot forward Lincoln 6 IoT AppSec: Automatic Security Analysis of IoT Firmware Lincoln 4 Defect Dojo Virginia A Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center Lincoln 5