AppSec USA 2015

AppSec USA 2015 took place Sept. 22, 2015 through Sept. 25, 2015 (6 years, 8 months ago) at Hyatt Regency San Francisco in San Francisco, California, USA.

• https://2015.appsecusa.org/
• https://infocon.org/cons/OWASP/AppSecUSA 2015/

Presentations:

Wednesday, Sept. 23, 2015

• 15:30 - Training (2 days) : Malware Crash Course
• 15:30 - Training (1 day): Risk Management Like a Boss: Making Your Risks Work for You
• 15:30 - Training (1 day): Hands-on Website Exploitation with Python
• 15:30 - Training (2 days): Creating and automating your own AppSec Pipeline
• 15:30 - Training (2 days): Advanced Android and iOS Hands-on Exploitation
• 15:30 - Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard
• 15:30 - Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards
• 15:30 - Training (2 days): Securely Designing and Developing with Popular MVC Frameworks
• 15:30 - Training (1 day): Simple End-to-End App Security with AWS

Thursday, Sept. 24, 2015

• 09:00 - The Moral Imperatives and Challenges for Modern Application Security
• 10:00 - Birds of a Feather Networking Sessions, Hosted by the OWASP Women in AppSec Program
• 10:30 - Building your own large scale web security scanning infrastructure in 40 minutes
• 10:30 - Security as Code: A New Frontier
• 10:30 - Securing your application using Docker
• 10:30 - WebRTC, or how secure is p2p browser communication?
• 11:30 - Blending the Automated and the Manual: Making Application Vulnerability Management Pay Dividends
• 11:30 - Hack the Cloud Hack the Company: the Cloud Impact on Enterprise Security
• 11:30 - Customizing Burp Suite - Getting the Most out of Burp Extensions
• 11:30 - The Inmates Are Running the Asylum – Why Some Multi-Factor Authentication Technology is Irresponsible
• 13:00 - Practical Timing Attacks using Mathematical Amplification of Time Difference in == Operator
• 13:00 - A New Ontology of Unwanted Web Automation
• 13:00 - Strengthening the Weakest Link: How to Manage Security Vulnerabilities in Third Party Libraries Used by Your Application
• 13:00 - Chimera: Securing a Cloud App Ecosystem with ZAP at Scale
• 14:00 - Efficient Context-sensitive Output Escaping for JavaScript Template Engines
• 14:00 - Secure Authentication without the Need for Passwords
• 14:00 - Career Fair
• 14:00 - QARK: Android App Exploit and SCA Tool
• 14:00 - Ah mom, why do I need to eat my vegetables?
• 15:00 - Sinking Your Hooks in Applications
• 15:00 - Practical Application Security Management- How to Win an Economically one-sided War
• 15:00 - 'SecureMe – Droid' Android Security Application
• 15:00 - Continuous Cloud Security Automation
• 15:30 - Encouraging Diversity and Advancing Cybersecurity Education
• 16:00 - OWASP & More - State of OWASP
• 16:00 - Fireside Chat: Tech Companies Tackle AppSec: Successes, Challenges, Battle Scars
• 16:00 - Fireside Chat: The End of SW Security as We Know It; Why This Might be a Good Thing.

Friday, Sept. 25, 2015

• 09:00 - Cybersecurity Partnership, Technology and Trust
• 10:30 - Detecting and managing bot activity more efficiently
• 10:30 - OWASP Reverse Engineering and Code Modification Prevention Project (Mobile)
• 10:30 - Future Banks Live in The Cloud: Building a Usable Cloud with Uncompromising Security
• 10:30 - Modern Malvertising and Malware web-based exploit campaigns
• 11:30 - Game of Hacks: The Mother of All Honeypots
• 11:30 - PHP Security, Redefined
• 11:30 - The State of Web Application Security in SCADA Web Human Machine Interfaces (HMIs) !
• 11:30 - Going Bananas for Cloud Security - Auditing and Monitoring your AWS deployment with security_monkey
• 13:00 - Cisco’s Security Dojo: Raising the Application Security Awareness of 20,000+
• 13:00 - Wait, Wait! Don't pwn Me!
• 13:00 - Doing AppSec at Scale: Taking the best of DevOps, Agile and CI/CD into AppSec.
• 13:00 - Cipher Text Says “MIID8zCCAtugAwIBAgIBAT” - Enterprise-wide SSL Automation w/Lemur + CloudCA
• 14:00 - AppSensor: Real-Time Event Detection and Response
• 14:00 - Turtles All the Way Down: Storing Secrets in the Cloud and the Data Center
• 14:00 - Threat Modeling the IoT Supply Chain
• 15:00 - New Methods in Automated XSS Detection: Dynamic XSS Testing without Using Static Payloads
• 15:00 - Providence: rapid vulnerability prevention
• 15:00 - Fireside Chat: How Universities Can Build the Next Generation of Security Engineers
• 15:00 - ShadowOS: Modifying the Android OS for Mobile Application Testing
• 16:30 - 50 Shades of AppSec

Presenters:

• Aaron Guzman
• Aaron Weaver
• Abhineet Jayaraj
• Aditya Gupta
• Aditya K Sood
• Adonis Fung
• Albert Yu
• Alex Garbutt
• Alex Stamos
• Apoorva Giri
• August Detlefsen
• Bishan Kochar
• Chris Cornutt
• Chris Romeo
• Christian Price
• Clare Nelson
• Colin Watson
• Dan Cornell
• Daniel Somerfield
• Dave Bott
• David Caissy
• David Hazar
• David Senecal
• Dheeraj Bhat
• Diogo Monica
• Dominic Weber
• Donald Malloy
• Dr. Phyllis Schneck
• Elissa Shevinsky
• Fred Donovan
• Hormazd Billimoria
• Igor Matlin
• Jacob West
• James Dolph
• James Pleger
• James “Tom” Bennett
• Jez Humble
• Jim Manico
• Joe Rozner
• John Melton
• John Pavone
• Jonathan Carter
• Josh Sokol
• Joshua Corman
• Ken Belva
• Kevin Dunn
• Kevin Glisson
• Krishnan Dhandapani
• Lieven Desmet
• Mark Miller
• Martin Johns
• Matt Bishop
• Matthew Finifter
• Matt Tesauro
• Max Feldman
• Michael Born
• Michael Coates
• Monika Morrow
• Mostafa Siraj
• Muhammed Noushad K
• Nera Wing Chun Liu
• Nicholas J. Parks
• Patrick Kelley
• Peter Kacherginsky
• Ray Kelly
• Reginaldo Silva
• Richard Meester
• Rob Witoff
• Rohit Pitke
• Sam Bowne
• Scott Behrens
• Shannon Lietz
• Shruthi Kamath
• Sid Stamm
• Steven Springett
• Tim Bach
• Tobias Gondrom
• Tony Trummer
• Troy Hunt
• Tushar Dalvi
• Vishal Asthana
• Xiaoran Wang