AppSecUSA 2015 has ended

Create Your Own Event

AppSecUSA 2015

AppSecUSA 2015 - Buy ticket at http://2015.appsecusa.org/buy/

8:00am PDT

Registration TBA

9:00am PDT

Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K

10:30am PDT

Coffee Break TBA

11:00am PDT

Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K

12:30pm PDT

Lunch TBA

1:30pm PDT

Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy

3:00pm PDT

Coffee Break TBA

3:30pm PDT

Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K

8:00am PDT

Registration TBA

9:00am PDT

Training (1 day): Hands-on Website Exploitation with Python Pacific BMichael Born • Fred Donovan Training (1 day): Risk Management Like a Boss: Making Your Risks Work for You Pacific AJosh Sokol Training (1 day): Simple End-to-End App Security with AWS Pacific HNicholas J. Parks Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy

10:30am PDT

Coffee Break TBA

11:00am PDT

Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (1 day): Hands-on Website Exploitation with Python Pacific BMichael Born • Fred Donovan Training (1 day): Risk Management Like a Boss: Making Your Risks Work for You Pacific AJosh Sokol Training (1 day): Simple End-to-End App Security with AWS Pacific HNicholas J. Parks Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K

12:30pm PDT

Lunch TBA

1:30pm PDT

Training (1 day): Hands-on Website Exploitation with Python Pacific BMichael Born • Fred Donovan Training (1 day): Risk Management Like a Boss: Making Your Risks Work for You Pacific AJosh Sokol Training (1 day): Simple End-to-End App Security with AWS Pacific HNicholas J. Parks Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy

3:00pm PDT

Coffee Break TBA

3:30pm PDT

Training (1 day): Hands-on Website Exploitation with Python Pacific BMichael Born • Fred Donovan Training (1 day): Risk Management Like a Boss: Making Your Risks Work for You Pacific AJosh Sokol Training (1 day): Simple End-to-End App Security with AWS Pacific HNicholas J. Parks Training (2 days) : Malware Crash Course Pacific OJames “Tom” Bennett • Peter Kacherginsky • Dominic Weber Training (2 days): Advanced Android and iOS Hands-on Exploitation Pacific GAditya Gupta Training (2 days): Creating and automating your own AppSec Pipeline Pacific FMatt Tesauro Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard Pacific IDavid Hazar Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards Pacific D & EDavid Caissy Training (2 days): Securely Designing and Developing with Popular MVC Frameworks Pacific NMuhammed Noushad K

5:30pm PDT

Registration TBA

6:00pm PDT

Pre-Conference reception and raffle sponsored by RiskIQ TBA

8:00am PDT

Registration TBA

9:00am PDT

The Moral Imperatives and Challenges for Modern Application Security Grand Ball RoomAlex Stamos

10:00am PDT

Coffee Break TBA Birds of a Feather Networking Sessions, Hosted by the OWASP Women in AppSec Program WIA Room

10:30am PDT

Getting Started with ModSecurity Room ELuca Carettoni • Mukul Khullar Building your own large scale web security scanning infrastructure in 40 minutes Room BBishan Kochar • Albert Kin-Ying Yu Security as Code: A New Frontier Room CShannon Lietz • Christian Price WebRTC, or how secure is p2p browser communication? Room DMartin Johns • Lieven Desmet (KU Leuven) Securing your application using Docker Room ADiogo Monica People & Capital - The Fire & Fuel for Chapter Activities Room FNoreen Whysel

11:30am PDT

Blending the Automated and the Manual: Making Application Vulnerability Management Pay Dividends Room BDan Cornell • Steve Springett Customizing Burp Suite - Getting the Most out of Burp Extensions Room DAugust Detlefsen • Monika Morrow The Inmates Are Running the Asylum – Why Some Multi-Factor Authentication Technology is Irresponsible Room AClare Nelson Hack the Cloud Hack the Company: the Cloud Impact on Enterprise Security Room CKevin Dunn I’m a Leader. Now What? - Basic Information for Jump Starting a Chapter Room FNoreen Whysel

12:30pm PDT

Lunch TBA

1:00pm PDT

Protecting your Web Application with Content Security Policy (CSP) Room EMartin Johns A New Ontology of Unwanted Web Automation Room CColin Watson Practical Timing Attacks using Mathematical Amplification of Time Difference in == Operator Room DMostafa Siraj Strengthening the Weakest Link: How to Manage Security Vulnerabilities in Third Party Libraries Used by Your Application Room BKrishnan Dhandapani Chimera: Securing a Cloud App Ecosystem with ZAP at Scale Room ATim Bach

2:00pm PDT

Security Requirements Identification using the OWASP Cornucopia Card Game Room EColin Watson Ah mom, why do I need to eat my vegetables? Room BJohn Pavone Efficient Context-sensitive Output Escaping for JavaScript Template Engines Room DAdonis Fung • Nera Wing Chun Liu • Albert Kin-Ying Yu Secure Authentication without the Need for Passwords Room CDon Malloy QARK: Android App Exploit and SCA Tool Room ATushar Dalvi • Tony Trummer Career Fair Pacific H, I, J, K, L & M

3:00pm PDT

Using the OWASP Benchmark to Assess Automated Vulnerability Analysis Tools Room EDave Wichers Sinking Your Hooks in Applications Room CRichard Meester • Joe Rozner Continuous Cloud Security Automation Room ARohit Pitke Practical Application Security Management- How to Win an Economically one-sided War Room DDheeraj Bhat 'SecureMe – Droid' Android Security Application Room BVishal Asthana • Abhineet Jayaraj

3:30pm PDT

Encouraging Diversity and Advancing Cybersecurity Education Room FAstha Singhal • Apoorva Giri • Shruthi Kamath • Elissa Shevinsky

4:00pm PDT

Fireside Chat: Tech Companies Tackle AppSec: Successes, Challenges, Battle Scars Room AScott Behrens • James Dolph • Matthew Finifter • Alex Garbutt • Reginaldo Silva Fireside Chat: The End of SW Security as We Know It; Why This Might be a Good Thing. Room CJosh Corman • Jez Humble • Shannon Lietz OWASP & More - State of OWASP Room BMichael Coates • Tobias Gondrom • Jim Manico • Josh Sokol

5:00pm PDT

Drinks in Vendor Area TBA

7:00pm PDT

Conference Reception (Dinner Cruise) Pier 3

8:00am PDT

Registration TBA

9:00am PDT

Cybersecurity Partnership, Technology and Trust Room ADr. Phyllis Schneck

10:00am PDT

Coffee Break TBA

10:30am PDT

Security Shepherd Web App Lightning Training Room EMark Denihan • Paul McCann Detecting and managing bot activity more efficiently Room BDavid Senecal Modern Malvertising and Malware web-based exploit campaigns Room CJames Pleger Future Banks Live in The Cloud: Building a Usable Cloud with Uncompromising Security Room ARob Witoff OWASP Reverse Engineering and Code Modification Prevention Project (Mobile) Room DDave Bott • Jonathan Carter What's in Your Toolbox? - Resources for Engagement Room FNoreen Whysel

11:30am PDT

Security Testing for Enterprise Messaging Applications Room EGursev Singh Kalra Game of Hacks: The Mother of All Honeypots Room BIgor Matlin PHP Security, Redefined Room CChris Cornutt The State of Web Application Security in SCADA Web Human Machine Interfaces (HMIs) ! Room DAditya K Sood Going Bananas for Cloud Security - Auditing and Monitoring your AWS deployment with security_monkey Room APatrick Kelley If You Build It, They Will Come - The OWASP Wiki Edit-a-Thon Room FNoreen Whysel • Jim Manico

12:30pm PDT

Lunch & WASPY Awards Atrium 1-5

1:00pm PDT

The Bug Hunters Methodology Room EJason Haddix Cisco’s Security Dojo: Raising the Application Security Awareness of 20,000+ Room BChris Romeo Cipher Text Says “MIID8zCCAtugAwIBAgIBAT” - Enterprise-wide SSL Automation w/Lemur + CloudCA Room AKevin Glisson Doing AppSec at Scale: Taking the best of DevOps, Agile and CI/CD into AppSec. Room DAaron Weaver Wait, Wait! Don't pwn Me! Room CJosh Corman • Shannon Lietz • Mark Miller • Jacob West Birds of a Feather - Flex Sessions Room FNoreen Whysel

2:00pm PDT

Web Application Security Testing with Fiddler Room EMichael Hidalgo AppSensor: Real-Time Event Detection and Response Room CJohn Melton Turtles All the Way Down: Storing Secrets in the Cloud and the Data Center Room ADaniel Somerfield Threat Modeling the IoT Supply Chain Room DAaron Guzman

3:00pm PDT

Fireside Chat: How Universities Can Build the Next Generation of Security Engineers Room AMatt Bishop • Sam Bowne • Sid Stamm Oh Yes, There is no more root detection for your Android App! - Reversing & Patching Binary” Room EAbhinav Sejpal New Methods in Automated XSS Detection: Dynamic XSS Testing without Using Static Payloads Room CKen Belva Providence: rapid vulnerability prevention Room DHormazd Billimoria • Max Feldman • Xiaoran Wang ShadowOS: Modifying the Android OS for Mobile Application Testing Room BRay Kelly

4:00pm PDT

Coffee Break & Exhibitors Raffle TBA

4:30pm PDT

50 Shades of AppSec Grand Ball RoomTroy Hunt