AppSec USA 2012

AppSec USA 2012 took place Oct. 23, 2012 through Oct. 26, 2012 (12 years ago) at Hyatt Regency Hotel Downtown in Austin, Texas, USA.

Presentations

Thursday, Oct. 25, 2012

09:00 - KEYNOTE: Infosec at Ludicrous Speed: Rugged DevOps and More... by Gene Kim
10:00 - Mobile Applications & Proxy Shenanigans
10:00 - Gauntlt: Rugged by Example
10:00 - Top Ten Web Defenses
10:00 - Building Predictable Systems using Behavioral Security Modeling: Functional Security Requirements
10:00 - Reverse Engineering “Secure” HTTP APIs With An SSL Proxy
11:00 - Cracking the Code of Mobile Application
11:00 - Hacking .NET Application: Reverse Engineering 101
11:00 - Building a Web Attacker Dashboard with ModSecurity and BeEF
11:00 - Doing the unstuck: How Rugged cultures drive Biz & AppSec Value
11:00 - Secure Code Reviews Magic or Art? A Simplified Approach to Secure Code Reviews
13:00 - KEYNOTE: Securing JavaScript by Douglas Crockford
14:00 - AppSec Training, Securing the SDLC, WebGoat.NET and the Meaning of Life
14:00 - How we tear into that little green man
14:00 - Put your robots to work: security automation at Twitter
14:00 - Bug Bounty Programs
14:00 - Hacking with WebSockets
15:00 - Exploiting Internal Network Vulns via the Browser using BeEF Bind
15:00 - I>S+D! - Interactive Application Security Testing (IAST), Beyond SAST/DAST
15:00 - Demystifying Security in the Cloud: AWS Scout
15:00 - The Diviner - Digital Clairvoyance Breakthrough - Gaining Access to the Source Code & Server Side Memory Structure of ANY Application (OWASP ZAP extension)
15:00 - Rebooting (secure) software development with continuous deployment
16:00 - Static Analysis of Java Class Files for Quickly and Accurately Detecting Web-Language Encoding Methods
16:00 - Cross Site Port Scanning
16:00 - DevOps Distilled: The DevOps Panel at AppSec USA
16:00 - Analyzing and Fixing Password Protection Schemes
16:00 - WTF - WAF Testing Framework

Friday, Oct. 26, 2012

08:30 - KEYNOTE: The State of OWASP
09:00 - KEYNOTE: Some Lessons from the Trenches by Michael Howard Keynote
10:00 - Payback on Web Attackers: Web Honeypots
10:00 - Incident Response: Security After Compromise
10:00 - Effective approaches to web application security
10:00 - Why Web Security Is Fundamentally Broken
10:00 - Spin the bottle: Coupling technology and SE for one awesome hack
11:00 - The Same-Origin Saga
11:00 - The Magic of Symbiotic Security: Creating an Ecosystem of Security Systems
11:00 - Unbreakable Oracle ERPs? Attacks on Siebel & JD Edwards
11:00 - Blended Threats and JavaScript: A Plan for Permanent Network Compromise
11:00 - Hack your way to a degree: a new direction in teaching application security at universities
13:00 - Builders Vs. Breakers
13:00 - Iran's real life cyberwar
13:00 - SQL Server Exploitation, Escalation, and Pilfering
13:00 - NoSQL, no security?
13:00 - Real World Cloud Application Security
14:00 - Securing the SSL channel against man-in-the-middle attacks: Future technologies - HTTP Strict Transport Security and Pinning of Certs
14:00 - The Application Security Ponzi Scheme: Stop paying for security failure
14:00 - XSS & CSRF with HTML5 - Attack, Exploit and Defense
14:00 - Unraveling Some of the Mysteries around DOM-Based XSS
14:00 - Get off your AMF and don’t REST on JSON
15:00 - Using Interactive Static Analysis for Early Detection of Software Vulnerabilities
15:00 - Web App Crypto - A Study in Failure
15:00 - Web Framework Vulnerabilities
15:00 - The 7 Qualities of Highly Secure Software
15:00 - Origin(al) Sins
16:00 - Four Axes of Evil
16:00 - Security at Scale
16:00 - Counterintelligence Attack Theory
16:00 - Pining For the Fjords: The Role of RBAC in Today's Applications
16:00 - Top Strategies to Capture Security Intelligence for Applications

Presenters