AppSec USA 2012

AppSec USA 2012 took place Oct. 23, 2012 through Oct. 26, 2012 (11 years, 6 months ago) at Hyatt Regency Hotel Downtown in Austin, Texas, USA.

Presentations

Thursday, Oct. 25, 2012

09:00 - KEYNOTE: Infosec at Ludicrous Speed: Rugged DevOps and More... by Gene Kim
10:00 - Mobile Applications & Proxy Shenanigans
10:00 - Building Predictable Systems using Behavioral Security Modeling: Functional Security Requirements
10:00 - Top Ten Web Defenses
10:00 - Gauntlt: Rugged by Example
10:00 - Reverse Engineering “Secure” HTTP APIs With An SSL Proxy
11:00 - Cracking the Code of Mobile Application
11:00 - Hacking .NET Application: Reverse Engineering 101
11:00 - Doing the unstuck: How Rugged cultures drive Biz & AppSec Value
11:00 - Building a Web Attacker Dashboard with ModSecurity and BeEF
11:00 - Secure Code Reviews Magic or Art? A Simplified Approach to Secure Code Reviews
13:00 - KEYNOTE: Securing JavaScript by Douglas Crockford
14:00 - How we tear into that little green man
14:00 - AppSec Training, Securing the SDLC, WebGoat.NET and the Meaning of Life
14:00 - Put your robots to work: security automation at Twitter
14:00 - Hacking with WebSockets
14:00 - Bug Bounty Programs
15:00 - Rebooting (secure) software development with continuous deployment
15:00 - I>S+D! - Interactive Application Security Testing (IAST), Beyond SAST/DAST
15:00 - Demystifying Security in the Cloud: AWS Scout
15:00 - The Diviner - Digital Clairvoyance Breakthrough - Gaining Access to the Source Code & Server Side Memory Structure of ANY Application (OWASP ZAP extension)
15:00 - Exploiting Internal Network Vulns via the Browser using BeEF Bind
16:00 - WTF - WAF Testing Framework
16:00 - Static Analysis of Java Class Files for Quickly and Accurately Detecting Web-Language Encoding Methods
16:00 - DevOps Distilled: The DevOps Panel at AppSec USA
16:00 - Analyzing and Fixing Password Protection Schemes
16:00 - Cross Site Port Scanning

Friday, Oct. 26, 2012

08:30 - KEYNOTE: The State of OWASP
09:00 - KEYNOTE: Some Lessons from the Trenches by Michael Howard Keynote
10:00 - Spin the bottle: Coupling technology and SE for one awesome hack
10:00 - Incident Response: Security After Compromise
10:00 - Effective approaches to web application security
10:00 - Why Web Security Is Fundamentally Broken
10:00 - Payback on Web Attackers: Web Honeypots
11:00 - Unbreakable Oracle ERPs? Attacks on Siebel & JD Edwards
11:00 - The Same-Origin Saga
11:00 - Hack your way to a degree: a new direction in teaching application security at universities
11:00 - The Magic of Symbiotic Security: Creating an Ecosystem of Security Systems
11:00 - Blended Threats and JavaScript: A Plan for Permanent Network Compromise
13:00 - Builders Vs. Breakers
13:00 - SQL Server Exploitation, Escalation, and Pilfering
13:00 - Iran's real life cyberwar
13:00 - NoSQL, no security?
13:00 - Real World Cloud Application Security
14:00 - Unraveling Some of the Mysteries around DOM-Based XSS
14:00 - The Application Security Ponzi Scheme: Stop paying for security failure
14:00 - XSS & CSRF with HTML5 - Attack, Exploit and Defense
14:00 - Get off your AMF and don’t REST on JSON
14:00 - Securing the SSL channel against man-in-the-middle attacks: Future technologies - HTTP Strict Transport Security and Pinning of Certs
15:00 - Web App Crypto - A Study in Failure
15:00 - Web Framework Vulnerabilities
15:00 - The 7 Qualities of Highly Secure Software
15:00 - Using Interactive Static Analysis for Early Detection of Software Vulnerabilities
15:00 - Origin(al) Sins
16:00 - Security at Scale
16:00 - Top Strategies to Capture Security Intelligence for Applications
16:00 - Pining For the Fjords: The Role of RBAC in Today's Applications
16:00 - Counterintelligence Attack Theory
16:00 - Four Axes of Evil

Presenters