AppSec California 2020 has ended

Create Your Own Event

AppSec California 2020

AppSec California 2020, January 21-24 at the Annenberg Beach House, Santa Monica, CA

8:00am

Registration and Breakfast Annenberg Community Beach House

9:00am

Attacking and Defending Containerized Apps and Serverless Tech [Day 1 of 2] Terrace LoungeTilak Thimmappa • Nithin Jois Building Secure API's and Web Applications [Day 1 of 2] Club RoomJim Manico Hacking for DevOps & Technologists [Day 1 of 2] Guest House ParlorChris Kubecka The DevSecOps MasterClass - AppSec Edition [Day 1 of 2] Garden Terrace RoomAbhay Bhargav

12:00pm

Lunch Annenberg Community Beach House

8:00am

Registration and Breakfast Annenberg Community Beach House

9:00am

Attacking and Defending Containerized Apps and Serverless Tech [Day 2 of 2] Terrace LoungeTilak Thimmappa • Nithin Jois Building Secure API's and Web Applications [Day 2 of 2] Club RoomJim Manico Hacking for DevOps & Technologists [Day 2 of 2] Guest House ParlorChris Kubecka The DevSecOps MasterClass - AppSec Edition [Day 2 of 2] Garden Terrace RoomAbhay Bhargav Web Application Hacking Training Sand and Sea RoomVandana Verma

12:00pm

Lunch Annenberg Community Beach House

7:30am

Registration (7:30am) and Breakfast (7:45am) Annenberg Community Beach House

8:40am

Welcome Address Garden Terrace RoomRichard Greenberg

8:55am

Diamond Sponsor Greetings Garden Terrace Room

9:00am

Diamond Sponsor Greetings Garden Terrace Room

9:05am

Diamond Sponsor Greetings Garden Terrace Room

9:10am

Opening Keynote Garden Terrace RoomAlex Stamos

10:00am

Break Annenberg Community Beach House

10:10am

CTF / Capture the Flag Guest House ParlorSecurity Innovation IoT Village Guest House Dining Room

10:20am

Lightning Talk: RaiseMe Introduction Terrace LoungeLori Barfield Lightning Talk: DevSecOps enabled micro-perimeter API protection Club RoomLukasz Radosz Lightning Talk: OWASP Project Showcase: Threat Model Cookbook Garden Terrace RoomJonathan Marcil Lightning Talk: OAuth 2.0 Misimplementation, Vulnerabilities and Best Practices Sand and Sea RoomPak Foley

10:55am

JWT Parkour Terrace LoungeLouis Nyffenegger Lessons from the war zone to the cyber trenches, what leaders need to know Sand and Sea RoomHise Gibson • Chris Kubecka • JC Vega Continuous Cloud Security Monitoring (CCSM) Garden Terrace RoomMichael Wylie The State of Credential Stuffing and the Future of Account Takeovers Club RoomJarrod Overson RaiseMe Career Workshops - Clinic: Resumes the RaiseMe Way (at Career Fair) Marion Davies Guest House, Veranda NorthMerissa Villalobos • Lori Barfield

11:55am

[In]secure deserialization, and how [not] to do it Terrace LoungeAlexei Kojenov Introducing the OWASP Nettacker Project Club RoomSam Stepanyan Solving trust issues at scale Sand and Sea RoomOmer Levi Hevroni Diversity by Design: Securing the Cyber Workforce Development Lifecycle Garden Terrace RoomZoe Braiterman • Richard Greenberg • Chris Kubecka • Kavya Pearlman • Vandana Verma • Lisa Jiggetts • Malia Mason

12:45pm

Lunch and Vendor Expo Annenberg Community Beach House

1:15pm

Vendor Spotlight Talk: Contrast Security: Security Instrumentation Is the Future of All Software Garden Terrace RoomJeff Williams Vendor Spotlight Talk: Shiftleft: Beyond the Top 10: Finding Business Logic Flaws, Data Leakage and Hard-Coded Secrets in Development Sand and Sea RoomArun Balakrishnan Vendor Spotlight Talk: Tala Security: Secure the Modern Web with Client-Side Web Application Firewall Terrace LoungeAanand Krishnan

2:00pm

Do certain types of developers or teams write more secure code? Club RoomAnita D'Amico • Chris Horn From the OWASP Top Ten(s) to the OWASP ASVS Sand and Sea RoomJim Manico More Than Turbulence Garden Terrace RoomChris Kubecka Open Source Developers Are Security’s New Front Line Terrace LoungeBrian Fox RaiseMe Career Workshops - Clinic: Interviewing and Negotiating (at Career Fair) Marion Davies Guest House, Veranda NorthMerissa Villalobos • Lori Barfield Career Fair Recruiting Expo Veranda South

3:00pm

Owning the cloud through SSRF and PDF Generators Club RoomChris Holt • Ben Sadeghipour Achieve AI-powered API Privacy using Open Source Terrace LoungeGianluca Brigandi Machine Learning and Application Security: Evolution of Attack Detection Garden Terrace RoomKavya Pearlman Where’s Waldo’s W-2? Building Data Discovery and Classification at Scale Sand and Sea RoomElizabeth Nammour • Pinyao Guo

3:50pm

Break and Vendor Expo Annenberg Community Beach House

4:20pm

RaiseMe Career Workshops - Talk: From Private to CISO: a CISO's Journey (at Career Fair) Marion Davies Guest House, Veranda NorthPaul Love The Security Phoenix from the ashes of DevOps Club RoomFrancesco Cipollone Kubernetes Security From The Trenches Terrace LoungeJulien Sobrier Scaling Up Is Hard To Do (Down dooby doo down down) - The Threat Modeling Cover Sand and Sea RoomIzar Tarandach • Allison Schoenfield Who Dis? The Right Way to Authenticate Garden Terrace RoomLakshmi Sudheer • Dhivya Chandramouleeswaran

5:20pm

Platinum Sponsor Greetings Garden Terrace Room

5:25pm

Platinum Sponsor Greetings Garden Terrace Room

5:30pm

Closing Keynote Garden Terrace RoomEva Galperin

6:20pm

Opening Reception Pool

7:30am

Registration (7:30am), Breakfast (7:45am) and Vendor Expo Annenberg Community Beach House

8:50am

Welcome Address Garden Terrace RoomHaral Tsitsivas

9:00am

Opening Keynote: Attribution Garden Terrace RoomTaiye Lambo

10:00am

Lightning Talk: Modern Web Security: The Art of Creating and Breaking Assertions Garden Terrace RoomJohn Villamil Lightning Talk: Operationalizing our Open Source Security Scanner Terrace LoungeNikki Brandt • Oliver Grubin Lightning Talk: Purple is the new black: Modern Approaches to Application Security Sand and Sea RoomTanya Janca Lightning Talk: Securing Third Party Apps in a Marketplace Ecosystem Club RoomHariram Balasundaram • Jana Geddis CTF / Capture the Flag Guest House ParlorSecurity Innovation IoT Village Guest House Dining Room

10:25am

Break and Vendor Expo Annenberg Community Beach House

10:55am

Hacking Cryptocurrencies Garden Terrace RoomMark Nesbitt Web App Containers: Applied Threat Modelling Terrace LoungeRichard Tychansky Dr. DevSecOps: Or How I stopped worrying about CI and started loving the cloud Sand and Sea RoomAbhay Bhargav OWASP SAMM2 - your dynamic software security journey Club RoomBrian Glas

11:55am

How do JavaScript frameworks impact the security of applications? Club RoomKsenia Peguero An Opinionated Guide to Scaling Your Company's Security Terrace LoungeClint Gibler Protecting the Bridge from Dollars to Bitcoin: Securing Coinbase’s Edge Payments Infrastructure Garden Terrace RoomNishil Shah What if we had TLS for Phone Numbers? An introduction to SHAKEN/STIR Sand and Sea RoomKelley Robinson

12:45pm

Lunch and Vendor Expo Annenberg Community Beach House

2:10pm

Car Hacking: A Security Analysis of an In-Vehicle-Infotainment System and App Platform Garden Terrace RoomSahar Mazloom Are You Properly Using JWTs? Club RoomDmitry Sotnikov Choosing the right static code analyzers based on hard data Terrace LoungeChris Horn Practical OWASP CRS in High Security Settings Sand and Sea RoomChristian Folini

3:10pm

Closing Keynote: Browser Manipulation for Bypassing Firewalls Garden Terrace RoomSamy Kamkar

4:00pm

Closing Remarks, CTF Winners Announcement, Raffle Drawings Garden Terrace Room