AppSec USA 2016 has ended

Create Your Own Event

AppSec USA 2016

Barath Subramaniam

MACYS.COM LLC
Staff Security Engineer
San Francisco

7:00am EDT

Registration Grand Ball Room Foyer

8:00am EDT

Keynote - Software Supply Chain Lifecycle Management: Reducing Attack Vectors and Enabling Rugged DevOps Grand Ball RoomJoe Jarzombek

9:00am EDT

Morning Coffee Break Grand Ball Room Foyer

9:15am EDT

Lightning Talk - Demystifying CSP Room CIlya Nesterov

9:30am EDT

Lightning Talk - Assessing and Exploiting XML Schemas Vulnerabilities Room CFernando Arnaboldi

9:45am EDT

Lightning Talk - Application Security in a DevOps World: Three Methods for Shifting Left Room CAaron Lindsay

10:00am EDT

Lightning Talk - Automated Gadget Chain Generation for Object Injections Room CHendrik Buchwald

10:15am EDT

Lightning Talk - If you can dodge a wrench!..... (or how not to security test your web app): Mount Vernon Square B Lightning Talk - WAF Evolution, or How I Stopped Worrying About Vulnerabilities Room CBrian McHenry

10:30am EDT

Lightning Talk - Taking Back Privacy to Gain Control Room CSteve Shillingford

10:45am EDT

Lightning Talk - Beyond The ‘Cript: Practical iOS Reverse Engineering Room CMichael Allen

11:00am EDT

Lightning Talk - LANGSEC 101: Taking the Theory Mainstream Room CKunal Anand

11:15am EDT

Lightning Talk - Building your Own Security ChatBot Room CAaron Weaver

11:30am EDT

Lightning Talk - Can IT & Engineering get along for the sake of building, deploying, and maintaining app security? Room CMark Stutzman

11:45am EDT

Lightning Talk - The hidden bug in public bug bounties Room CJacob Hansen

12:00pm EDT

Lunch Break Rooms A&B

1:00pm EDT

Next Gen Web Pen Testing: Handling Modern Applications in a Penetration Test Grand SouthJason Gillam • Kevin Johnson

2:15pm EDT

Cleaning Your Applications' Dirty Laundry with Scumblr Grand CentralScott Behrens • Andrew Hoernecke Threat Modeling with Architectural Risk Patterns Grand SouthStephen de Vries

3:00pm EDT

Securing the Electronic Frontier Meeting Room 2Cory Doctorow

3:30pm EDT

HTTPS & TLS in 2016: Security practices from the front lines Grand CentralEric Mill • Kenneth White

5:00pm EDT

Keynote - The Less Hacked Path Grand Ball RoomSamy Kamkar

6:30pm EDT

Conference Dinner at the SPY Museum SPY Museum

8:00am EDT

Keynote - Cryptography in the age of Heartbleed Grand Ball RoomMatthew Green

9:00am EDT

Morning Coffee Break Grand Ball Room Foyer

9:15am EDT

Serverless Security: Doing Security in 100 milliseconds Room CJames Wickett

9:30am EDT

Putting an “I” in Code Review – Turning Code Reviewing Interactive Grand SouthOfer Maor Why using SMS in the authentication chain is risky and what better options are available Grand NorthSimon Thorpe

10:45am EDT

Exploiting CORS Misconfigurations for Bitcoins and Bounties Grand SouthJames Kettle

12:00pm EDT

Lunch Break Rooms A&B

1:00pm EDT

Automating API Penetration Testing using fuzzapi Grand SouthAbhijeth Dugginapeddi • Lalith Rallabhandi Needle: Finding Issues within iOS Applications Grand NorthMarco Lancini

1:05pm EDT

DevSecOps: A Peek Inside the Pipeline Room CShannon Lietz

2:15pm EDT

Misconfigured CORS and why web application security is not getting easier. Grand SouthEvan Johnson