AppSec USA 2017 has ended

Create Your Own Event

AppSec USA 2017

arrow_back View All Dates

8:00am EDT

Registration North Registration

9:00am EDT

Welcome Note Coronado L KeyNote - Discussion on Application Security: John Steven and Jim Manico will be discussing application security from a unique perspective. Coronado L

10:00am EDT

Morning Coffee Break Veracruz C Capture the Flag Coronado M&N Exhibit Veracruz C Women in AppSec (WIA) Hangout room Coronado P&Q OWASP Store Durango 1

10:30am EDT

An Investigation into the Differences Between Web Application Scanning Tools when Scanning for XSS and SQLi Coronado L Moving Fast and Securing Things Coronado J Securing C code that seems to work just fine Coronado K Test Driven Security in the DevOps pipeline Coronado H Federated Login CSRF Fiesta 6

11:30am EDT

Bug Bounty Programs: Successfully Controlling Complexity and Perpetual Temptation Coronado L There’s a new sheriff in town; dynamic security group recommendations with Grouper and Dredge Coronado J Popular Approaches to Preventing Code Injection Attacks are Dangerously Wrong Coronado K Overcoming Mobile App Security Challenges with DevOps Coronado H Top 10 Security Best Practices to secure your Microservices Fiesta 6

12:30pm EDT

Lunch Veracruz B

1:30pm EDT

When Molehill Vulnerabilities Become Mountainous Exploits Coronado L Leveraging the ASVS in the Secure SDLC Coronado J Measuring End-to-End Security Engineering Coronado K Making Vulnerability Management Less Painful with OWASP DefectDojo Coronado H Leveraging Blockchain for Identity and Authentication in IoT is good for Security Fiesta 6

2:30pm EDT

iGoat – A Self Learning Tool for iOS App Pentesting and Security Coronado L Application Security “Built from Scratch” Coronado J Embedding GDPR into the SDLC Coronado K Juggling the Elephants – Making AppSec a Continuous Program Coronado H An Overview of API Underprotection Fiesta 6

3:30pm EDT

Black-Box Approximate Taint Tracking by Utilizing Data Partitioning Coronado L “Capture the Flag” for Developers: Upping your Training Game Coronado J DASTProxy: Don’t let your automated security testing program stall on crawl. Instead focus on business context. Coronado K WAFs FTW! A modern devops approach to security testing your WAF Coronado H Androsia: A tool for securing in memory sensitive data Fiesta 6

4:30pm EDT

Afternoon Coffee Break Veracruz C

5:00pm EDT

KeyNote - Runa A. Sandvik: Building a Culture of Security at The New York Times Coronado L

6:00pm EDT

WASPY Award Ceremony Coronado L

6:45pm EDT

Conference Dinner Epcot