AppSec USA 2017 has ended

Create Your Own Event

AppSec USA 2017

Tin Zaw

Verizon
Director, Security Solutions
Greater Los Angeles Area

The author resides in sunny southern California, where he seeks a Zen state of mind amid the chaotic mix of technology, society and cyber threats. Wanting to make the world safer online, he gave up his beloved programming job to focus on cyber security. He is a former president of OWASP Los Angeles and he currently co-leads OWASP Automated Threats project. He currently works at Verizon to make the Internet safer and more secure.

9:00am EDT

Project Summit & Project Reviews USA 2017 Coronado Q&R

5:00pm EDT

Pre-Conference Reception Veracruz C

9:00am EDT

Welcome Note Coronado L KeyNote - Discussion on Application Security: John Steven and Jim Manico will be discussing application security from a unique perspective. Coronado L

10:00am EDT

Morning Coffee Break Veracruz C

10:30am EDT

Securing C code that seems to work just fine Coronado K Federated Login CSRF Fiesta 6

11:30am EDT

Bug Bounty Programs: Successfully Controlling Complexity and Perpetual Temptation Coronado L

12:30pm EDT

Lunch Veracruz B

1:30pm EDT

Leveraging the ASVS in the Secure SDLC Coronado J Measuring End-to-End Security Engineering Coronado K Leveraging Blockchain for Identity and Authentication in IoT is good for Security Fiesta 6

2:30pm EDT

Embedding GDPR into the SDLC Coronado K An Overview of API Underprotection Fiesta 6

3:30pm EDT

WAFs FTW! A modern devops approach to security testing your WAF Coronado H

4:30pm EDT

Afternoon Coffee Break Veracruz C

5:00pm EDT

KeyNote - Runa A. Sandvik: Building a Culture of Security at The New York Times Coronado L

6:00pm EDT

WASPY Award Ceremony Coronado L

6:45pm EDT

Conference Dinner Epcot

9:00am EDT

Passive Fingerprinting of HTTP/2 Clients Coronado L

10:00am EDT

Morning Coffee Break Veracruz C

10:30am EDT

Supply Chain Anarchy – Trojaned Binaries in the Java Ecosystem Coronado J Where we’re going… we won’t need passwords… Coronado K

11:30am EDT

Core Rule Set for the Masses Coronado H

12:30pm EDT

Lunch Veracruz B

1:30pm EDT

Common Developer Crypto Mistakes (with illustrations in Java) Coronado J Beyond End-to-End Encryption: Threats Models For Secure Messaging Fiesta 6

2:30pm EDT

NoSQL Is Not NoVulnerable Coronado L Automating TLS Configuration Verification on the Back-End of the Web Application Stack Coronado J

3:30pm EDT

Practical Dynamic Application Security Testing within an Enterprise Coronado H An Agile Framework for Building GDPR Privacy and Data Protection Requirements into SDLC Fiesta 6

4:30pm EDT

Passport Program Raffle Veracruz C Afternoon Coffee Break Veracruz C

5:00pm EDT

KeyNote - Tony UcedaVelez: Fixing Broken Enterprise Threat Models w/ OWASP Measures: Commissioning AppSec Professionals for Real Change Coronado L

5:45pm EDT

Closing Note Coronado L