AppSec USA 2017 has ended

Create Your Own Event

AppSec USA 2017

BH

Brian Higdon

Freddie Mac
Director of Application Security
McLean, VA/Jacksonville, FL

DevSecOps

8:00am

Registration North Registration

8:00am

Registration North Registration

9:00am

KeyNote - Discussion on Application Security: John Steven and Jim Manico will be discussing application security from a unique perspective. Coronado L

10:00am

Morning Coffee Break Veracruz C

10:30am

Test Driven Security in the DevOps pipeline Coronado H

11:30am

Top 10 Security Best Practices to secure your Microservices Fiesta 6

12:30pm

Lunch Veracruz B

1:30pm

Measuring End-to-End Security Engineering Coronado K Leveraging Blockchain for Identity and Authentication in IoT is good for Security Fiesta 6

2:30pm

Juggling the Elephants – Making AppSec a Continuous Program Coronado H

3:30pm

“Capture the Flag” for Developers: Upping your Training Game Coronado J

4:30pm

Afternoon Coffee Break Veracruz C

5:00pm

KeyNote - Runa A. Sandvik: Building a Culture of Security at The New York Times Coronado L

6:45pm

Conference Dinner Epcot

9:00am

Cookie Security – Myths and Misconceptions Coronado J What We Learned Remediating XSS in GitHub Open Source Projects Coronado K This Old App, a guide to renovating apps for the cloud Fiesta 6

10:00am

Morning Coffee Break Veracruz C

10:30am

Supply Chain Anarchy – Trojaned Binaries in the Java Ecosystem Coronado J Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines Coronado H

11:30am

Friday the 13th: Attacking JSON Coronado L

12:30pm

Lunch Veracruz B

1:30pm

Common Developer Crypto Mistakes (with illustrations in Java) Coronado J How to detect CSRF vulnerability, reliably? Coronado K DevSecOps is real - What we learned by matching our appsec testing to our continuous release cycles Coronado H

2:30pm

NoSQL Is Not NoVulnerable Coronado L Automating TLS Configuration Verification on the Back-End of the Web Application Stack Coronado J How to stop worring about application Container security Coronado H

3:30pm

Practical Dynamic Application Security Testing within an Enterprise Coronado H

4:30pm

Afternoon Coffee Break Veracruz C

5:00pm

KeyNote - Tony UcedaVelez: Fixing Broken Enterprise Threat Models w/ OWASP Measures: Commissioning AppSec Professionals for Real Change Coronado L