AppSec USA 2016 has ended

Create Your Own Event

AppSec USA 2016

Swetabh Suman

Goodwall
Ambassador
India

A Professional Hacker, Web Developer, SEO specialist, Hardware and Networking Professional, Penetration Tester, Data Recovery Expert, Passionate Photographer, A Bug Bounty Hacker, Known about Kali linux, Gentoo, BackTrack Linux, Backbox Linux, Pentoo, BlackArch, Blackbuntu, NST, Weakerth4n Linux

8:00am EDT

Developer Summit Meeting Room 9 Project Summit Meeting Room 8

9:00am EDT

Training Session - Assessing and Exploiting Control Systems & IoT Day 1 (2 Day) Meeting Room 12Justin Searle Training Session - Creating and Automating your own AppSec Pipeline Day 1 (2 Day) Meeting Room 15Matt Tesauro Training Session - Hands-On Security in DevOps (SecDevOps) Workshop Day 1 (2 Days) Meeting Room 16Abhay Bhargav Training Session - Mobile Application Exploitation iOS and Android Day 1 (2 Day) Meeting Room 14Prateek Gianchandani • Dinesh Shetty Training Session - Practical IoT Exploitation Day 1 (2 Day) Meeting Room 13Aditya Gupta • Norman Shamas Training Session - Secure Coding in Java Day 1 (2 Day) Meeting Room 11Robert Seacord

9:00am EDT

Training Session - AppSec Safari (1 Day) Meeting Room 10Mark Hoopes • Jason Li Training Session - Assessing and Exploiting Control Systems & IoT Day 2 (2 Day) Meeting Room 12Justin Searle Training Session - Creating and Automating your own AppSec Pipeline Day 2 (2 Day) Meeting Room 15Matt Tesauro Training Session - Hands-On Security in DevOps (SecDevOps) Workshop Day 2 (2 Day) Meeting Room 16Abhay Bhargav Training Session - Mobile Application Exploitation iOS and Android Day 2 (2 Day) Meeting Room 14Prateek Gianchandani • Dinesh Shetty Training Session - Practical IoT Exploitation Day 2 (2 Day) Meeting Room 13Aditya Gupta • Norman Shamas Training Session - Secure Coding in Java Day 2 (2 Day) Meeting Room 11Robert Seacord

5:00pm EDT

WIA - Networking event Mount Vernon Square A&B

6:00pm EDT

Pre-Conference Reception Mount Vernon Square A&B

7:00pm EDT

OWASP Leaders Meeting Meeting Room 16

8:00am EDT

Keynote - Software Supply Chain Lifecycle Management: Reducing Attack Vectors and Enabling Rugged DevOps Grand Ball RoomJoe Jarzombek

9:00am EDT

Morning Coffee Break Grand Ball Room Foyer

9:15am EDT

Lightning Talk - Demystifying CSP Room CIlya Nesterov

9:30am EDT

OWASP Bug Bounty for projects Meeting Room 2 Lightning Talk - Assessing and Exploiting XML Schemas Vulnerabilities Room CFernando Arnaboldi The Ways Hackers Are Taking To Win The Mobile Malware Battle Grand NorthYair Amit

9:45am EDT

Lightning Talk - Application Security in a DevOps World: Three Methods for Shifting Left Room CAaron Lindsay

10:00am EDT

Lightning Talk - Automated Gadget Chain Generation for Object Injections Room CHendrik Buchwald

10:45am EDT

Your License for Bug Hunting Season Grand NorthJim Denaro • Casey Ellis

12:00pm EDT

Lunch Break Rooms A&B WIA - Mentoring event Lafayette

1:00pm EDT

Next Gen Web Pen Testing: Handling Modern Applications in a Penetration Test Grand SouthJason Gillam • Kevin Johnson Using language-theoretics and runtime visibility to align AppSec with DevOps Grand CentralKunal Anand

2:00pm EDT

Career Fair Room C

2:15pm EDT

Cleaning Your Applications' Dirty Laundry with Scumblr Grand CentralScott Behrens • Andrew Hoernecke Should there be an Underwriters Laboratories certification for software in IoT products? Grand NorthJosh Corman • Anita D'Amico • Kevin Greene Threat Modeling with Architectural Risk Patterns Grand SouthStephen de Vries

3:00pm EDT

Securing the Electronic Frontier Meeting Room 2Cory Doctorow

3:30pm EDT

How to Find the Next Great Deserialization CVE Grand SouthArshan Dabirsiaghi When encryption is not enough: Attacking Wearable - Mobile Application communication over BLE Grand NorthChandra Prakash Gopalaiah • Sumanth Naropanth • Kavya Racharla

4:30pm EDT

Afternoon Coffee Break Grand Ball Room Foyer

5:00pm EDT

Keynote - The Less Hacked Path Grand Ball RoomSamy Kamkar

6:30pm EDT

Conference Dinner at the SPY Museum SPY Museum

8:00am EDT

Keynote - Cryptography in the age of Heartbleed Grand Ball RoomMatthew Green WASPY Awards Grand CentralFrank Catucci • Dave Ferguson

9:00am EDT

Morning Coffee Break Grand Ball Room Foyer

9:30am EDT

Protect Containerized Applications With System Call Profiling Grand CentralChenxi Wang Putting an “I” in Code Review – Turning Code Reviewing Interactive Grand SouthOfer Maor Why using SMS in the authentication chain is risky and what better options are available Grand NorthSimon Thorpe

12:00pm EDT

Lunch Break Rooms A&B

1:55pm EDT

Making Invisible Things Visible: Revealing Secrets from 25,000 Applications Room CDerek Weeks

2:15pm EDT

If You Can’t Beat ‘Em Join ‘Em: Practical Tips For Running A Successful Bug Bounty Program Grand NorthGrant McCracken • Daniel Trauner Scaling Security Assessment at the Speed of DevOps Grand CentralBlake Hitchcock • Brian Manifold • Roger Seagle

3:15pm EDT

Glad You Could Join Us: Bringing Security into the DevOps Fold Room CBryan Batty

3:30pm EDT

AppSec++ Take the best of Agile, DevOps and CI/CD into your AppSec Program Grand SouthMatt Tesauro Breaking and Fixing your ‘Docker’ ized environments Grand CentralManideep Konakandla

4:30pm EDT

Afternoon Coffee Break & Passport Program Raffle Grand Ball Room Foyer

5:00pm EDT

Keynote - What does winning look like? Grand Ball RoomDan Geer