InfoconDB

Global AppSec - DC 2019 took place Sept. 9, 2019 through Sept. 13, 2019 (4 years, 7 months ago) at Washington Marriott Wardman Park Hotel in Washington DC, USA.

Presentations

Wednesday, Sept. 11, 2019

17:00 - Welcome Reception

Thursday, Sept. 12, 2019

08:45 - Opening Remarks
09:00 - Applying Security Engineering Principles to Complex Composite Systems Keynote
10:30 - Secure Medical Device Deployment Standard
10:30 - Owning the Cloud through SSRF and PDF Generators
10:30 - A Structured Code Audit Approach to Find Flaws in Highly Audited Webapps
10:30 - Non-Political Security Learnings from the Mueller Report
10:30 - Security & Chaos Engineering: A Novel Approach to Crafting Secure and Resilient Distributed Systems
10:30 - Securing Serverless by Breaking-in
11:30 - Insider Threat Assessments: A methodology for improving insider threat deterrence and detection
11:30 - OWASP Find Security Bugs: The community static code analyzer
11:30 - Secure Coding Dojo
11:30 - DevSecOps: Essential Pipeline Tooling to Enable Continuous Security
11:30 - Cryptocoin Miners vs Machine Learning
11:30 - Shift left, shift right, or run security right through the middle?
14:00 - Making a Change, One at a time - Diversity: More than just Gender Keynote
15:30 - API Security Project
15:30 - Securing Modern Applications: The Data Behind DevSecOps
15:30 - Building Secure Password-less Web Applications using WebAuthn
15:30 - Building Secure React Applications
15:30 - Beyond data-at-rest: Advances in Native NoSQL Database Encryption
15:30 - Quantifying the Security Benefits of Debloating Web Applications
16:30 - Fighting Formjacking and Magecart - Separating fact from fiction
16:30 - The As, Bs, and Four Cs of Testing Cloud-Native Applications
16:30 - What Do Hackers Want from Bounty Programs?
16:30 - Running FaaS with Scissors
16:30 - A Case Study in Scaling Oversight
17:30 - Networking Event
18:00 - Leaders Meeting

Friday, Sept. 13, 2019

09:00 - Talent matters. You matter. Keynote
10:30 - SSO Wars: The Token Menace
10:30 - OWASP Serverless Top 10
10:30 - 0 to 1 Startup Security
10:30 - A Purple Team View of Serverless and GraphQL Applications
10:30 - Dependency Check
10:30 - Keys Under Doormats: Problems and Solutions for Securely Storing Credentials in Web Applications
11:30 - How to Build an AppSec Training Program That Isn’t Boring
11:30 - A Day in the Life of IoT Security Architect
11:30 - SAMM
11:30 - A Practical Guide to Complying with SB-327 (Information Privacy of Connected Devices)
11:30 - Farewell, WAF - Exploiting SQL Injection from Mutation to Polymorphism
11:30 - Common API Security Pitfalls
14:00 - A DevSecOps Tale of Business, Engineering, and People Keynote
15:30 - Who Dis? The Right Way to Authenticate
15:30 - Swimming with the kubectl fish: the why, the how, the what of the CNCF Kubernetes Assessment
15:30 - Threat Modeling with Flow Diagrams
15:30 - SEDATED
15:30 - How to Fix the Diversity Gap in Cybersecurity
15:30 - Salesforce Data Governance: What dark secrets lurk in your instance?
16:30 - IoT AppSec: Automatic Security Analysis of IoT Firmware
16:30 - Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
16:30 - The Zest of ZAP: How scripting in our favorite tool can bridge the gap between dev teams and security
16:30 - Testing with your left foot forward
16:30 - Defect Dojo
16:30 - Pilots, Surgeons and Developers - Improving Application Security With Checklists

Global AppSec - DC 2019

Presentations

Presenters