Global AppSec DC 2019 has ended

Create Your Own Event

Global AppSec DC 2019

Registration is NOW Open
Marriott Wardman Park
2660 Woodley Rd NW
Washington DC, District of Columbia 20008 USA
Phone: 1-202-328-2000
Book Now
*discount rates expire August 19, 2019

8:00am EDT

Registration Atrium

9:00am EDT

A Builder’s Guide to Single Page Application Security Lincoln 3 Attacking and Defending Containerized Apps and Serverless Tech Lincoln 2 Seth & Ken’s Excellent Adventures in Secure Code Review Lincoln 5 Using the OWASP Application Security Verification Standard 4.0 to Secure Your Applications Lincoln 6

10:00am EDT

AM Coffee Break Exhibit Hall C

12:30pm EDT

Lunch Exhibit Hall C

3:00pm EDT

PM Coffee Break Exhibit Hall C

8:00am EDT

Registration Atrium

9:00am EDT

Secure Coding with the OWASP Top Ten Lincoln 4

10:00am EDT

AM Coffee Break Exhibit Hall C

12:30pm EDT

Lunch Exhibit Hall C

3:00pm EDT

PM Coffee Break Exhibit Hall C

9:00am EDT

Registration Atrium Project Review Buchanan Building an AppSec Program with OWASP Lincoln 3 DevSecOps - Automating Security in DevOps Lincoln 2 Women In AppSec - Web Application Penetration Training - (No charge ) Lincoln 5FILLING

10:00am EDT

AM Coffee Break Exhibit Hall C

12:30pm EDT

Lunch Exhibit Hall C

3:00pm EDT

PM Coffee Break Exhibit Hall C

5:00pm EDT

Welcome Reception Exhibit C

6:30pm EDT

Security Compass present Global AppSec Welcome Party Stones Throw Restaurant - Marriott

7:30am EDT

Registration Atrium

8:00am EDT

Capture the Flag - CMD+CTRL Web Application Cyber Range Virginia B

8:45am EDT

Opening Remarks Salon 2

9:00am EDT

Applying Security Engineering Principles to Complex Composite Systems Salon 2

10:00am EDT

AM Coffee Break Exhibit Hall C Members Lounge Atrium

10:30am EDT

A Structured Code Audit Approach to Find Flaws in Highly Audited Webapps Lincoln 2 Non-Political Security Learnings from the Mueller Report Lincoln 3 Security & Chaos Engineering: A Novel Approach to Crafting Secure and Resilient Distributed Systems Lincoln 6 Securing Serverless by Breaking-in Lincoln 4 Secure Medical Device Deployment Standard Virginia A Owning the Cloud through SSRF and PDF Generators Lincoln 5

11:30am EDT

OWASP Find Security Bugs: The community static code analyzer Lincoln 2 Insider Threat Assessments: A methodology for improving insider threat deterrence and detection Lincoln 3 Shift left, shift right, or run security right through the middle? Lincoln 6 Cryptocoin Miners vs Machine Learning Lincoln 4 Secure Coding Dojo Virginia A DevSecOps: Essential Pipeline Tooling to Enable Continuous Security Lincoln 5

12:30pm EDT

Lunch Exhibit Hall C

2:00pm EDT

Making a Change, One at a time - Diversity: More than just Gender Salon 2

3:00pm EDT

PM Coffee Break Exhibit Hall C

3:30pm EDT

Building Secure Password-less Web Applications using WebAuthn Lincoln 2 Securing Modern Applications: The Data Behind DevSecOps Lincoln 3 Building Secure React Applications Lincoln 6 Quantifying the Security Benefits of Debloating Web Applications Lincoln 4 API Security Project Virginia A Beyond data-at-rest: Advances in Native NoSQL Database Encryption Lincoln 5

4:30pm EDT

Running FaaS with Scissors Lincoln 2 A Case Study in Scaling Oversight Lincoln 3 The As, Bs, and Four Cs of Testing Cloud-Native Applications Lincoln 6 Fighting Formjacking and Magecart - Separating fact from fiction Lincoln 4 What Do Hackers Want from Bounty Programs? Lincoln 5

5:30pm EDT

Networking Event Exhibitor Hall C

6:00pm EDT

Leaders Meeting Lincoln 2

7:30am EDT

Registration Atrium

8:00am EDT

Capture the Flag - CMD+CTRL Web Application Cyber Range Virginia B

9:00am EDT

Talent matters. You matter. Salon 2

10:00am EDT

AM Coffee Break Exhibit Hall C Members Lounge Atrium

10:30am EDT

A Purple Team View of Serverless and GraphQL Applications Lincoln 2 OWASP Serverless Top 10 Lincoln 3 0 to 1 Startup Security Lincoln 6 SSO Wars: The Token Menace Lincoln 4 Dependency Check Virginia A Keys Under Doormats: Problems and Solutions for Securely Storing Credentials in Web Applications Lincoln 5

11:30am EDT

How to Build an AppSec Training Program That Isn’t Boring Lincoln 2 A Practical Guide to Complying with SB-327 (Information Privacy of Connected Devices) Lincoln 3 A Day in the Life of IoT Security Architect Lincoln 6 Farewell, WAF - Exploiting SQL Injection from Mutation to Polymorphism Lincoln 4 SAMM Virginia A Common API Security Pitfalls Lincoln 5

12:30pm EDT

Lunch Exhibit Hall C

2:00pm EDT

A DevSecOps Tale of Business, Engineering, and People Salon 2

3:00pm EDT

PM Coffee Break Exhibit Hall C

3:30pm EDT

Threat Modeling with Flow Diagrams Lincoln 2 Salesforce Data Governance: What dark secrets lurk in your instance? Lincoln 3 How to Fix the Diversity Gap in Cybersecurity Lincoln 6 Who Dis? The Right Way to Authenticate Lincoln 4 SEDATED Virginia A Swimming with the kubectl fish: the why, the how, the what of the CNCF Kubernetes Assessment Lincoln 5

4:30pm EDT

The Zest of ZAP: How scripting in our favorite tool can bridge the gap between dev teams and security Lincoln 2 Pilots, Surgeons and Developers - Improving Application Security With Checklists Lincoln 3 Testing with your left foot forward Lincoln 6 IoT AppSec: Automatic Security Analysis of IoT Firmware Lincoln 4 Defect Dojo Virginia A Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center Lincoln 5