View source for OWASP AppSec DC 2012/Schedule/4-5-2012

{|  border=1 
| height="60" align="center" colspan="5" style="background: rgb(64, 88, 160) none repeat scroll 0% 0%; -moz-background-clip: border; -moz-background-origin: padding; -moz-background-inline-policy: continuous; color: white;" | <font size="5"> '''Plenary Day 2 - 4/5/2012'''</font>
|- 
|  width=72 valign=middle bgcolor=#7b8abd |
!  width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | Critical Infrastructure
!  width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | Defend&#33;
!  width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | On the Go
!  width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | SDLC
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 7:30 AM - 9:00 AM
|  align=center colspan=4 valign=middle height=30 bgcolor=#e0e0e0 align=center | Registration
|- 
|  width=72 valign=middle bgcolor=#7b8abd rowspan=2 | 9:00 AM	-	9:50 AM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center rowspan=2 | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Pentesting_Smart_Grid_Web_Apps Pentesting Smart Grid Web Apps]<br><br>
Justin Searle
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Friends_dont_let_friends_store_passwords_in_source_code Friends don't let friends store passwords in source code]<br><br>
Neil Matatall
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center rowspan=2 | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Smart_Bombs_Mobile_Vulnerability_and_Exploitation Smart Bombs: Mobile Vulnerability and Exploitation]<br><br>
Kevin Johnson, John Sawyer and Tom Eston
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center rowspan=2 | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Overcoming_the_Quality_vs_Quantity_Problem_in_SoftwareSecurity_Testing Overcoming the Quality vs. Quantity Problem in Software Security Testing]<br><br>
Rafal Los
|-
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Web_Application_Defense_with_Bayesian_Attack_Analysis Web Application Defense with Bayesian Attack Analysis]<br><br>
Ryan Barnett
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 9:50 AM	-	10:00 AM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | Coffee Breakß
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 10:00 AM	-	10:50 AM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Vulnerabilities_in_Industrial_Control_Systems Vulnerabilities in Industrial Control Systems]<br><br>
ICS-CERT
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Access_Control Access Control]<br><br>
Jim Manico
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Software_Security_Goes_Mobile Software Security Goes Mobile]<br><br>
Jacob West
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Baking_In_Security_Sweet_Secure_Cupcakes Baking In Security, Sweet, Secure, Cupcakes]<br><br>
Ken Johnson and Matt Ahrens
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 10:50 AM	-	11:00 AM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | Coffee Break
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 11:00 AM	-	11:50 AM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/AMI_Security AMI Security]<br><br>
John Sawyer and Don Weber
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/SharePoint_Security_101 SharePoint Security 101]<br><br>
Rob Rachwald
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Behind_Enemy_Lines__Practical_Triage_Approaches_to_MobileSecurity_Abroad__2012_Edition Behind Enemy Lines - Practical& Triage Approaches to Mobile Security Abroad - 2012 Edition]<br><br>
Justin Morehouse
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Understanding_IAST__More_Context_Better_Analysis Understanding IAST - More Context, Better Analysis]<br><br>
Jeff Williams
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 11:50 AM	-	1:00 PM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | No-Host Lunch
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 1:00 PM	-	1:50 PM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Project_Basecamp_News_from_Camp_4 Project Basecamp: News from Camp 4]<br><br>
Reid Wightman
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Enterprise_Security_API_ESAPI_for_C_Plus_Plus Enterprise Security API (ESAPI) for C Plus Plus]<br><br>
Dan Amodio
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/WhackaMobile_II_Mobile_App_Pen_Testing_with_the_MobiSecLive_Environment Whack-a-Mobile II: Mobile App Pen Testing with the MobiSec Live Environment]<br><br>
Kevin Johnson and Tony Delagrange
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Baking_Security_In__How_to_Get_Every_IT_Architect_toBecome_a_Security_Ambassador Baking Security In - How to Get Every IT Architect to Become a Security Ambassador]<br><br>
Michele Guel
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 1:50 PM	-	2:00 PM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | Coffee Break
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 2:00 PM	-	2:50 PM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Real_world_backdoors_on_industrial_devices Real world backdoors on industrial devices]<br><br>
Ruben Santamarta
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Dynamic_DASTWAF_Integration Dynamic DAST/WAF Integration]<br><br>
Ryan Barnett
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/An_InDepth_Introduction_to_the_Android_Permissions_Modeland_How_to_Secure_MultiComponent_Applications An In-Depth Introduction to the Android Permissions Model, and How to Secure Multi-Component Applications]<br><br>
Jeff Six
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Teaching_an_Old_Dog_New_Tricks_Securing_Development_withPMD Teaching an Old Dog New Tricks: Securing Development with PMD]<br><br>
Joe Hemler
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 2:50 PM	-	3:00 PM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | Coffee Break
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 3:00 PM	-	3:50 PM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Denial_of_Surface Denial of Surface.]<br><br>
Eireann Leverett
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Cloudbased_dWAF_A_Real_World_Deployment_Case_Study Cloud-based dWAF: A Real World Deployment Case Study]<br><br>
Alexander Meisel
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Android_in_the_Healthcare_Workplace_A_Case_Study Android in the Healthcare Workplace A Case Study]<br><br>Thomas Richards
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/What_can_an_Acquirer_do_to_prevent_developers_from_makedangerous_software_errors What can an Acquirer do to prevent developers from make dangerous software errors?]<br><br>
Michele Moss and Don Davidson
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 3:50 PM	-	4:00 PM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | Coffee Break
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 4:00 PM	-	4:50 PM
|  align=center width=200 valign=middle height=60 bgcolor=#c0a0a0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Securing_Critical_Infrastructure Securing Critical Infrastructure]<br><br>
Francis Cianfrocca
|  align=center width=200 valign=middle height=60 bgcolor=#ffdf80 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Using_PHPIDS_to_Understand_Attacks_Trends Using PHPIDS to Understand Attacks Trends]<br><br>
Salvador Grec
|  align=center width=200 valign=middle height=60 bgcolor=#a0c0e0 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Mobile_Application_Security__Who_how_and_why Mobile Application Security - Who, how and why]<br><br>
Mike Park and Charles Henderson
|  align=center width=200 valign=middle height=60 bgcolor=#b3ff99 align=center | [https://www.owasp.org/index.php/OWASP_AppSec_DC_2012/Private_information_Protection_in_Cloud_Computing___LawsCompliance_and_Cloud_Security_Misconceptions Private information Protection in Cloud Computing _ Laws, Compliance and Cloud Security Misconceptions]<br><br>
Mikhail Utin and Daniil Utin
|- 
|  width=72 valign=middle bgcolor=#7b8abd | 5:00 PM
|  valign=middle height=30 bgcolor=#e0e0e0 align=center colspan=4 | Closing Remarks
|}