View source for 2016 BASC Agenda

{{2016_BASC:Header_Template | Agenda}}
<!-- --------------------------------------------------------------------
INSTRUCTIONS FOR EDITORS:

Updating this agenda is a 3-step process. First you must convert the existing entries to the
new format. You can do these one at a time or all at once. Whatever is easiest. Second, you need to
fill in the data for the presentation. Third, miscellaneous details should be cleaned up.

1) To convert a presentation to the new format:
  - Most importantly, look at the 10:00 time slot and use it as an example.
  - Find the time slot you want to modify.
  - If it already has the Presentation Agenda Template then you are done
  - Copy: {{2010_BASC:Presentaton_Agenda_Template|TYPE|To Be Determined Presentation|To Be Determined}}
  - Delete the text that is in the time slot already. This requires great care.
      You probably want to delete the lines that do not begin with a 
      pipe (|) or an open curly ({).
  - Paste the text you copied into that time slot.
  - Replace the word "TYPE" with either "Presentation" or "Keynote"

2) To fill in the appropriate data:
  - Go to http://www.owasp.org/index.php/2010_BASC_Presentations and add
    the presentation's abstract. If you don't have an abstract,
    insert "Presentation abstract will be available shortly."
  - Go to http://www.owasp.org/index.php/2010_BASC_Speakers and add the speaker(s) bio.
    If you don't have bio information, just put the speaker's name into the page and 
    and make their bio "Speaker information will be available shortly."
    Until it presents a problem, list multiple speakers as one.
    For example, "John Boy & Grandpa".
  - Find the right slot in the table.
  - Replace the "To Be Determined Presentation" text in the table
    with the presentation name __EXACTLY__ as it is on the presentation page.
  - Replace the "To Be Determined" text in the table
    with the speaker(s) name(s) __EXACTLY__ as it is on the bio page.
  
3) Clean up whatever needs cleaning up.

-------------------------------------------------------------------- -->

__FORCETOC__

<br/>
<br/>

= Presentations =

<!-- lighter blue: #9BA8CF -->
{| style="width:80%" border="0" align="center"
 ! colspan="3" align="center"  |
<table>
<tr>
<td>
[[File:OWASP Logo.gif]]<br/> 
</td>
<td>
<span style="font-size:150%">'''Presentations<br/>OWASP Boston Application Security Conference · Saturday, October 1, 2016'''</span>
</td>
</tr>
</table>
 |-
 | style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 8:30-9:30 || colspan="2" style="width:80%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 1px; border-left-width: 1px; border-bottom-width: 0px" align="center" | 
<span style="font-size:130%">'''Breakfast and Registration'''</span><br/>
provided by our Platinum Sponsor<br/>
<span style="font-size:140%">'''[http://hpe.com Hewlett Packard Enterprise]'''</span><br/>
|-
 | style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 09:00-09:50 || colspan="2" style="width:80%; margin:10px; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 1px; border-left-width: 1px; border-bottom-width: 0px" align="center" | 
<span style="font-size:130%">'''Opening Keynote'''</span><br/>
<span style="font-size: 150%">'''[[2016_BASC_Homepage#Keynotes|AppSec and DevOps]]'''</span><br/>
<span style="font-size:130%">'''[[2016_BASC_Homepage#Keynotes|Dennis Hurst]]'''</span><br/>
 |-
 | style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | || align="center" style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | '''Washington/Jefferson Room'''
 | align="center" style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | '''Adams Room'''
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 10:00-10:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" |  
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Continuous Application Security at Scale with IAST and RASP|Jeff Williams }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|The Code You Never See - Vulnerabilities From 3rd party Marketing Javascript|Jim Weiler }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 11:00-11:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Future of Information Security and IoT Panel|Rob Cheyne, Tom Conner, Pedro Marcano, Roy Wattanasin }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Software Product Security: A Way Forward|Bill Campbell }}
|-
 | style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 12:00-13:00 || colspan="2" style="background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 1px; border-left-width: 1px; border-bottom-width: 0px" align="center" | 
<span style="font-size:130%">'''Lunch'''</span><br/>
provided by our Platinum Sponsor<br/>
<span style="font-size:140%">'''[http://checkmarx.com Checkmarx]'''</span><br/>
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 13:00-13:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Hacking with the Gibson, A Hacker Musical|Matt Morency }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Practical Threat Modeling|Dennis Hurst }}

|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 14:00-14:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Vulnerability Management – Turning Chaos into Order|Tania Ward and Kristen Pascale }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|AppSec Awareness: A Blue Print for Security Culture Change|Chris Romeo }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 15:00-15:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Penetrating Android Applications|Roshan Thomas and Anurag Dwivedy  }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Handle With Care: You Have My VA Report!|Nivedita Murthy }}

|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 16:00-16:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|Docker Anti-Patterns, from Confusion to Enlightenment|Erik Dasque }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|From the Trenches - XML Injection|Casey Dunham }}
|-

|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 17:00-17:30 || colspan="2" style="width:30%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width: 1px; border-right-width: 1px; border-left-width: 1px; border-bottom-width: 0px" align="center" | 
<span style="font-size:130%">'''Social Time'''</span><br/>
provided by our Platinum Sponsors<br/>
<span style="font-size:140%">'''[http://veracode.com Veracode]''' &nbsp;&nbsp;&nbsp; '''[http://rapid7.com Rapid7]'''</span><br/>
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 1px" align="center" | 17:30-18:30 || colspan="2" style="width:30%; background:#background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 1px; border-left-width: 1px; border-bottom-width: 1px" align="center" | 
<br/>

<span style="font-size:130%">'''Closing Keynote'''</span><br/>
<span style="font-size: 150%">'''[[2016_BASC_Homepage#Keynotes|Soft Skills Matter - How to speak XSS]]'''</span><br/>
<span style="font-size:130%">'''[[2016_BASC_Homepage#Keynotes|Deidre Diamond]]'''</span><br/>

<!--<span style="font-size:140%">'''[[2016_BASC_Speakers#Josh Corman|Josh Corman]]'''</span><br/>
<span style="font-size: 110%">Paul Roberts</span><br/>-->
<br/>
<span style="font-size:130%">'''Raffle'''</span><br/>
<span style="font-size:130%">'''Wrap Up'''</span><br/>
<br/>
|}


= Workshops & Resume Sessions =


<!-- lighter blue: #9BA8CF -->
{| style="width:80%" border="0" align="center"
 ! colspan="4" align="center"  |
<table>
<tr>
<td>
[[File:OWASP Logo.gif]]<br/> 
</td>
<td>
<span style="font-size:150%">'''Workshops & Resume Sessions<br/>OWASP Boston Application Security Conference · Saturday, October 1, 2016'''</span>
</td>
</tr>
</table>
 |-
 | style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | || align="center" style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | '''Cranmore'''
 | align="center" style="width:30%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | '''Monroe'''
 | align="center" style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" | '''Bretton Woods'''
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 10:00-10:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | {{2016_BASC:Workshop_Agenda_Template|Presentation|Painless Web and Mobile Hacking 101|Apoorv Munshi }}
 | rowspan="2" style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" |   
{{2016_BASC:Workshop_Agenda_Template|Presentation|Highlights from the Matasano Challenges|Matt Cheung| }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Resume_Agenda_Template|CyberSN }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 11:00-11:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | {{2016_BASC:Workshop_Agenda_Template|Presentation|Painless Web and Mobile Hacking 101|Apoorv Munshi }}
 | style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Resume_Agenda_Template|Millennium Consulting }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 13:00-13:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | {{2016_BASC:Workshop_Agenda_Template|Presentation| |  }}
 | rowspan="2" style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" |   
{{2016_BASC:Workshop_Agenda_Template|Presentation|Highlights from the Matasano Challenges|Matt Cheung| }}
 | rowspan="4" style="width:30%; background:#F8F8ED; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Presentaton_Agenda_Template|Presentation|ThreatModeling|Robert Hurlbut  }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 14:00-14:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" |  
{{2016_BASC:Workshop_Agenda_Template|Presentation|Painless Web and Mobile Hacking 101|Apoorv Munshi }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 15:00-15:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Resume_Agenda_Template|Wayfair  }}
 | rowspan="2" style="width:30%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 
{{2016_BASC:Workshop_Agenda_Template|Presentation|Highlights from the Matasano Challenges|Matt Cheung| }}
|-
| style="width:10%; background:#FFFFFF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | 16:00-16:50 || style="width:30%; background:#FFFBDF; border-style: solid; border-color: #D2D2D2; border-top-width:1px; border-right-width: 0px; border-left-width: 0px; border-bottom-width: 0px" align="center" | {{2016_BASC:Resume_Agenda_Template|CyberSN  }}
|}



{{2016_BASC:Footer_Template | Agenda}}