AppSec USA 2013

Schedule Speakers

Wednesday, November 20

8:30 am

Welcome to OWASP AppSecUSA - Updates
9:00 am

Computer and Network Security: I Think We Can Win!
10:00 am

Automation Domination

Hardening Windows 8 apps for the Windows Store

PANEL: Aim-Ready-Fire

The Perilous Future of Browser Security
11:00 am

Can AppSec Training Really Make a Smarter Developer?

Computer Crime Laws - Tor Ekeland, Attorney

From the Trenches: Real-World Agile SDLC

Why is SCADA Security an Uphill Battle?
12:00 pm

All the network is a stage, and the APKs merely players: Scripting Android Applications

BASHing iOS Applications: dirty, s*xy, cmdline tools for mobile auditors

Case Study: 10 Steps to Agile Development without Compromising Enterprise Security

The Cavalry Is US: Protecting the public good
1:00 pm

2013 AppSec Guide and CISO Survey: Making OWASP Visible to CISOs

HTML5: Risky Business or Hidden Security Tool Chest?

Mantra OS: Because The World is Cruel

PANEL: Privacy or Security: Can We Have Both?
2:00 pm

"What Could Possibly Go Wrong?" - Thinking Differently About Security

PANEL: Cybersecurity and Media: All the News That's Fit to Protect?

Revenge of the Geeks: Hacking Fantasy Sports Sites

What You Didn't Know About XML External Entities Attacks
3:00 pm

Making the Future Secure with Java

OWASP Zed Attack Proxy

PANEL: Mobile Security 2.0: Beyond BYOD

Pushing CSP to PROD: Case Study of a Real-World Content-Security Policy Implementation
4:00 pm

Big Data Intelligence (Harnessing Petabytes of WAF statistics to Analyze & Improve Web Protection in the Cloud)

Forensic Investigations of Web Explotations

OWASP Top Ten Proactive Controls

Tagging Your Code with a Useful Assurance Label
6:00 pm

Silk, Webservers, Exploits and RATz by M4v3r1ck
8:00 pm

Bug Bounty - Group Hack

Thursday, November 21

9:00 am

') UNION SELECT `This_Talk` AS ('New Exploitation and Obfuscation Techniques’)%00

AppSec at DevOps Speed and Portfolio Scale

Contain Yourself: Building Secure Containers for Mobile Devices

Mobile app analysis with Santoku Linux
10:00 am

Accidental Abyss: Data Leakage on The Internet

Leveraging OWASP in Open Source Projects - CAS AppSec Working Group

PiOSoned POS - A Case Study in iOS based Mobile Point-of-Sale gone wrong

iOS Application Defense - iMAS
11:00 am

An Introduction to the Newest Addition to the OWASP Top 10. Experts Break-Down the New Guideline and Offer Provide Guidance on Good Component Practice

OWASP Hackademic: a practical environment for teaching application security

The State Of Website Security And The Truth About Accountability and “Best-Practices”

Verify your software for security bugs
12:00 pm

Application Security: Everything we know is wrong

Insecure Expectations

OWASP Periodic Table of Elements

PANEL: Women in Information Security: Who Are We? Where Are We Going? Why?
1:00 pm

Hack.me: a new way to learn web application security

Hacking Web Server Apps for iOS

NIST - Missions and impacts to US industry, economy and citizens

Panel: Wait Wait... Don't Tell Me Software Security
2:00 pm

Buried by time, dust and BeEF

Go Fast AND Be Secure: Eliminating Application Risk in the Era of Modern, Component-Based Development

Modern Attacks on SSL/TLS: Let the BEAST of CRIME and TIME be not so LUCKY

OWASP Broken Web Applications (OWASP BWA): Beyond 1.0
3:00 pm

CSRF: not all defenses are created equal

HTTP Time Bandit

The 2013 OWASP Top 10

Wassup MOM? Owning the Message Oriented Middleware
4:00 pm

Conference Close and Award Ceremony