InfoconDB

AppSec USA 2015 took place Sept. 22, 2015 through Sept. 25, 2015 (8 years, 10 months ago) at Hyatt Regency San Francisco in San Francisco, California, USA.

https://2015.appsecusa.org
https://infocon.org/cons/OWASP/AppSecUSA 2015/

Presentations

Wednesday, Sept. 23, 2015

15:30 - Training (2 days) : Malware Crash Course
15:30 - Training (1 day): Simple End-to-End App Security with AWS
15:30 - Training (2 days): Securely Designing and Developing with Popular MVC Frameworks
15:30 - Training (2 days): OWASP Top 10 – Exploitation and Effective Safeguards
15:30 - Training (1 day): Risk Management Like a Boss: Making Your Risks Work for You
15:30 - Training (1 day): Hands-on Website Exploitation with Python
15:30 - Training (2 days): Hands-on Auditing of the OWASP Application Security Verification Standard
15:30 - Training (2 days): Creating and automating your own AppSec Pipeline
15:30 - Training (2 days): Advanced Android and iOS Hands-on Exploitation

Thursday, Sept. 24, 2015

09:00 - The Moral Imperatives and Challenges for Modern Application Security
10:00 - Birds of a Feather Networking Sessions, Hosted by the OWASP Women in AppSec Program
10:30 - Building your own large scale web security scanning infrastructure in 40 minutes
10:30 - Securing your application using Docker
10:30 - WebRTC, or how secure is p2p browser communication?
10:30 - Security as Code: A New Frontier
11:30 - The Inmates Are Running the Asylum – Why Some Multi-Factor Authentication Technology is Irresponsible
11:30 - Hack the Cloud Hack the Company: the Cloud Impact on Enterprise Security
11:30 - Blending the Automated and the Manual: Making Application Vulnerability Management Pay Dividends
11:30 - Customizing Burp Suite - Getting the Most out of Burp Extensions
13:00 - A New Ontology of Unwanted Web Automation
13:00 - Practical Timing Attacks using Mathematical Amplification of Time Difference in == Operator
13:00 - Chimera: Securing a Cloud App Ecosystem with ZAP at Scale
13:00 - Strengthening the Weakest Link: How to Manage Security Vulnerabilities in Third Party Libraries Used by Your Application
14:00 - Ah mom, why do I need to eat my vegetables?
14:00 - QARK: Android App Exploit and SCA Tool
14:00 - Efficient Context-sensitive Output Escaping for JavaScript Template Engines
14:00 - Secure Authentication without the Need for Passwords
14:00 - Career Fair
15:00 - 'SecureMe – Droid' Android Security Application
15:00 - Continuous Cloud Security Automation
15:00 - Sinking Your Hooks in Applications
15:00 - Practical Application Security Management- How to Win an Economically one-sided War
15:30 - Encouraging Diversity and Advancing Cybersecurity Education
16:00 - OWASP & More - State of OWASP
16:00 - Fireside Chat: Tech Companies Tackle AppSec: Successes, Challenges, Battle Scars
16:00 - Fireside Chat: The End of SW Security as We Know It; Why This Might be a Good Thing.

Friday, Sept. 25, 2015

09:00 - Cybersecurity Partnership, Technology and Trust
10:30 - Future Banks Live in The Cloud: Building a Usable Cloud with Uncompromising Security
10:30 - Modern Malvertising and Malware web-based exploit campaigns
10:30 - Detecting and managing bot activity more efficiently
10:30 - OWASP Reverse Engineering and Code Modification Prevention Project (Mobile)
11:30 - Going Bananas for Cloud Security - Auditing and Monitoring your AWS deployment with security_monkey
11:30 - Game of Hacks: The Mother of All Honeypots
11:30 - PHP Security, Redefined
11:30 - The State of Web Application Security in SCADA Web Human Machine Interfaces (HMIs) !
13:00 - Doing AppSec at Scale: Taking the best of DevOps, Agile and CI/CD into AppSec.
13:00 - Wait, Wait! Don't pwn Me!
13:00 - Cipher Text Says “MIID8zCCAtugAwIBAgIBAT” - Enterprise-wide SSL Automation w/Lemur + CloudCA
13:00 - Cisco’s Security Dojo: Raising the Application Security Awareness of 20,000+
14:00 - AppSensor: Real-Time Event Detection and Response
14:00 - Threat Modeling the IoT Supply Chain
14:00 - Turtles All the Way Down: Storing Secrets in the Cloud and the Data Center
15:00 - Fireside Chat: How Universities Can Build the Next Generation of Security Engineers
15:00 - Providence: rapid vulnerability prevention
15:00 - ShadowOS: Modifying the Android OS for Mobile Application Testing
15:00 - New Methods in Automated XSS Detection: Dynamic XSS Testing without Using Static Payloads
16:30 - 50 Shades of AppSec

Presenters

Aaron Guzman
Aaron Weaver
Abhineet Jayaraj
Aditya Gupta
Aditya K Sood
Adonis Fung
Albert Yu
Alex Garbutt
Alex Stamos
Apoorva Giri
August Detlefsen
Bishan Kochar
Chris Cornutt
Chris Romeo
Christian Price
Clare Nelson
Colin Watson
Dan Cornell
Daniel Somerfield
Dave Bott
David Caissy
David Hazar
David Senecal
Dheeraj Bhat
Diogo Monica
Dominic Weber
Donald Malloy
Dr. Phyllis Schneck
Elissa Shevinsky
Fred Donovan
Hormazd Billimoria
Igor Matlin
Jacob West
James Dolph
James Pleger
James “Tom” Bennett
Jez Humble
Jim Manico
Joe Rozner
John Melton
John Pavone
Jonathan Carter
Josh Sokol
Joshua Corman
Ken Belva
Kevin Dunn
Kevin Glisson
Krishnan Dhandapani
Lieven Desmet
Mark Miller
Martin Johns
Matt Bishop
Matthew Finifter
Matt Tesauro
Max Feldman
Michael Born
Michael Coates
Monika Morrow
Mostafa Siraj
Muhammed Noushad K
Nera Wing Chun Liu
Nicholas J. Parks
Patrick Kelley
Peter Kacherginsky
Ray Kelly
Reginaldo Silva
Richard Meester
Rob Witoff
Rohit Pitke
Sam Bowne
Scott Behrens
Shannon Lietz
Shruthi Kamath
Sid Stamm
Steven Springett
Tim Bach
Tobias Gondrom
Tony Trummer
Troy Hunt
Tushar Dalvi
Vishal Asthana
Xiaoran Wang