AppSec USA 2017 has ended

Create Your Own Event

AppSec USA 2017

arrow_back View All Dates

8:00am EDT

Registration North Registration

9:00am EDT

Passive Fingerprinting of HTTP/2 Clients Coronado L Cookie Security – Myths and Misconceptions Coronado J What We Learned Remediating XSS in GitHub Open Source Projects Coronado K Building a Secure DevOps Pipeline Coronado H This Old App, a guide to renovating apps for the cloud Fiesta 6 Capture the Flag Coronado M&N Women in AppSec (WIA) Hangout Room Coronado P&Q

10:00am EDT

Morning Coffee Break Veracruz C Members Lounge Durango 2 Exhibit Veracruz C OWASP Store Durango 1

10:30am EDT

HUNT: Data Driven Web Hacking & Manual Testing Coronado L Supply Chain Anarchy – Trojaned Binaries in the Java Ecosystem Coronado J Where we’re going… we won’t need passwords… Coronado K Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines Coronado H R2-D2: ColoR-inspired Convolutional NeuRal Network (CNN)-based AndroiD Malware Detections Fiesta 6

11:30am EDT

Friday the 13th: Attacking JSON Coronado L Handling of Security Requirements in Software Development Lifecycle Coronado J Enhancing Physical Perimeter Defense Using SDR Coronado K Core Rule Set for the Masses Coronado H SPLC as a Service Fiesta 6

12:30pm EDT

Lunch Veracruz B

1:30pm EDT

ReproNow: Save time Reproducing and Triaging Security bugs Coronado L Common Developer Crypto Mistakes (with illustrations in Java) Coronado J How to detect CSRF vulnerability, reliably? Coronado K DevSecOps is real - What we learned by matching our appsec testing to our continuous release cycles Coronado H Beyond End-to-End Encryption: Threats Models For Secure Messaging Fiesta 6

2:30pm EDT

NoSQL Is Not NoVulnerable Coronado L Automating TLS Configuration Verification on the Back-End of the Web Application Stack Coronado J A Static Tainting Analysis Method for Aspect-Oriented Programs Coronado K How to stop worring about application Container security Coronado H How To Approach InfoSec Like a Fed(eral Auditor) Fiesta 6

3:30pm EDT

Crafting the next-generation Man-in-the-Browser Trojan Coronado L Building Secure ASP.NET Core MVC Applications Coronado J Beyond Takeover – Attacker’s in. Now what? Coronado K Practical Dynamic Application Security Testing within an Enterprise Coronado H An Agile Framework for Building GDPR Privacy and Data Protection Requirements into SDLC Fiesta 6

4:30pm EDT

Passport Program Raffle Veracruz C Afternoon Coffee Break Veracruz C

5:00pm EDT

KeyNote - Tony UcedaVelez: Fixing Broken Enterprise Threat Models w/ OWASP Measures: Commissioning AppSec Professionals for Real Change Coronado L

5:45pm EDT

Closing Note Coronado L