AppSec USA 2014

AppSec USA 2014 took place Sept. 16, 2014 through Sept. 19, 2014 (9 years, 7 months ago) at Denver Marriott City Center in Denver, Colorado, USA.

Presentations

Tuesday, Sept. 16, 2014

08:00 - (Separate registration required) OWASP Top 10 – Exploitation and Effective Safeguards (day 1 of 2) Training
08:00 - (Separate registration required) Advanced Web Penetration Testing (day 1 of 2) Training
08:00 - (Separate registration required) Cryptography for the Modern Developer (day 1 of 1) Training
08:00 - (Separate registration required) Malware Analysis Crash Course (day 1 of 2) Training
08:00 - (Separate registration required) Securing Mobile Devices and Applications (day 1 of 2) Training
08:00 - (Separate registration required) Ruby on Rails - Auditing & Exploiting the Popular Web Framework (day 1 of 2) Training

Wednesday, Sept. 17, 2014

08:00 - (Separate registration required) OWASP Top 10 – Exploitation and Effective Safeguards (day 2 of 2) Training
08:00 - (Separate registration required) Securing Mobile Devices and Applications (day 2 of 2) Training
08:00 - (Separate registration required) Advanced Web Penetration Testing (day 2 of 2) Training
08:00 - (Separate registration required) Malware Analysis Crash Course (day 2 of 2) Training
08:00 - (Separate registration required) Managing Web & Application Security - OWASP for Senior Managers (day 1 of 1) Training
08:00 - (Separate registration required) Ruby on Rails - Auditing & Exploiting the Popular Web Framework (day 2 of 2) Training
09:00 - Open Workshops Workshop
13:00 - OWASP Media Project Conference Setup Workshop

Thursday, Sept. 18, 2014

08:00 - Keynote: Bruce Schneier - The Future of Incident Response
09:00 - OWASP ESAPI Bug Squash-a-thon Workshop
09:30 - IEEE Computer Society's Center for Secure Design - Helping You Design More Secure Software
09:30 - Mobile Security Attacks: A Glimpse from the Trenches
09:30 - Modern Web Application Defense with OWASP Tools
09:30 - Building Your Application Security Data Hub: The Imperative for Structured Vulnerability Information
09:30 - Zed Attack Proxy (Zap) 101 Workshop
09:30 - Starting a chapter Workshop
10:30 - Use After Free Exploitation
10:30 - Growing membership Workshop
10:30 - Nmap 101 Workshop
10:30 - AppSec Survey 2.0: Fine-Tuning an AppSec Training Program Based on Data
10:30 - Hacking .NET/C# Applications: Defend By Design
10:30 - Anatomy of memory scraping, credit card stealing POS malware
13:00 - OWASP ASIDE Project Planning Workshop
13:00 - iOS App Integrity: Got Any?
13:00 - Project Monterey or How I Learned to Stop Worrying and Love the Cloud
13:00 - 11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey
13:00 - Finding speakers and other meeting ideas Workshop
13:00 - CSRF 101 Workshop
13:00 - Static Analysis for Dynamic Assessments
13:00 - OWASP .NET Project Planning and Content Creation Workshop
14:00 - CMS Hacking 101 Workshop
14:00 - Your Password Complexity Requirements are Worthless
14:00 - Community outreach Workshop
14:00 - Runtime Manipulation of Android and iOS Applications
14:00 - Red Phish, Blue Phish: Improved Phishing Detection Using Perceptual Hashing
14:00 - Lean Security for Small or Medium Sized Business
15:00 - Not Go Quietly: Adaptive Strategies and Unlikely Teammates
15:00 - Client-side security with the Security Header Injection Module (SHIM)
15:00 - Blended Web and Database Attacks on Real-time, In-Memory Platforms
15:00 - App Server Hacking 101 (clusterd) Workshop
15:00 - Hosting a conference Workshop
15:00 - Top 10 Web Hacking Techniques of 2013
16:30 - Keynote: Renee Guttmann - CISO Perspectives: Aligning Secure Software Application Development with Business Interests
19:15 - Homebrewing 101 Workshop

Friday, Sept. 19, 2014

08:00 - Keynote: Gary McGraw - Bug Parades, Zombies, and the BSIMM: A Decade of Software Security
09:00 - OWASP WebGoat 6.0 Project Planning and Beyond Workshop
09:00 - OWASP Reverse Engineering and Code Modification Prevention Project (Mobile) Workshop
09:00 - OWASP Project Summit Workshop
09:00 - OpenSAMM Workshop Play-books, PCI-SAMM Matrix, Project QA Workshop
09:00 - OWASP Developer Guide Writing Session Workshop
09:30 - Warning Ahead: Security Storms are Brewing in Your JavaScript
09:30 - Welcome to Hackazon - Get your favorite app scanner ready! Workshop
09:30 - Starting a project Workshop
09:30 - Bringing a Machete to the Amazon
09:30 - Ten Secrets to Secure Mobile Applications
09:30 - The DevOps of Things
10:30 - Threat Modeling Made Interactive!
10:30 - Reversing Engineering a Web Application - For Fun, Behavior & WAF Detection
10:30 - Hacking .NET(C#) Applications: The Black Arts (ASM attacks)
10:30 - DevOps and Security: The Facts, The Myths, The Legend
10:30 - Penetration testing code coverage Workshop
10:30 - Funding a project Workshop
12:00 - Birds of a Feather (topic to be determined at AppSec USA) Workshop
13:00 - Where the Security Rubber Meets the DevOps Road
13:00 - When you can't afford 0days: Client-side exploitation for the masses
13:00 - OWASP Mobile Top Ten Project Planning and Call for Input Workshop
13:00 - Customizing Burp Suite - Getting the most out of your extensions Workshop
13:00 - Marketing a project Workshop
13:00 - Auto-Scaling Web Application Security in the Cloud
13:00 - Stop Chasing Vulnerabilities - Introducing *Continuous* Application Security
14:00 - Implications & Opportunities at the Bleeding Edge of DevOps
14:00 - Hacking the Oracle Application Framework: A case study in deep-dive pen testing
14:00 - From the Ground Up
14:00 - Catch me if you can: Building a Web Malware Analyzer using Machine Learning
14:00 - Introduction to Golismero (The Web Knife) Workshop
14:00 - Recruiting developers Workshop
15:00 - OWASP A9: A Year Later - Are you still using components with known vulnerabilities?
15:00 - Pwning the Pawns with WiHawk Workshop
15:00 - Ground Truths of a Rugged DevOps Practitioner
15:00 - Cloud Security at Scale and What it Means for Your Application
15:00 - Headless Browser Hide and Seek
15:00 - Hosting a project summit Workshop
16:30 - Keynote: OWASP Global Board

Presenters