2015 BASC Homepage - Revision history

Tom Conner at 23:31, 30 September 2015

2015-09-30T23:31:35Z

Tom Conner at 23:05, 30 September 2015

2015-09-30T23:05:02Z

Tom Conner at 16:44, 29 September 2015

2015-09-29T16:44:53Z

Tom Conner at 18:58, 16 September 2015

2015-09-16T18:58:53Z

Tom Conner at 18:42, 16 September 2015

2015-09-16T18:42:11Z

Tom Conner at 23:38, 15 September 2015

2015-09-15T23:38:34Z

Tom Conner at 05:27, 11 September 2015

2015-09-11T05:27:42Z

Tom Conner at 05:26, 11 September 2015

2015-09-11T05:26:36Z

Tom Conner at 04:57, 11 September 2015

2015-09-11T04:57:40Z

Tom Conner at 15:53, 3 July 2015

2015-07-03T15:53:24Z

@@ Line 53: / Line 53: @@
 * [[2015_BASC_Speakers | Speakers]]
 * [[2015_BASC_Presentations | Presentations]]
 * LinkedIn [https://www.linkedin.com/groups/Boston-Application-Security-Conference-BASC-4631647 Group]
 * Twitter: Follow [http://twitter.com/#!/BASConf @BASConf] HashTag: #basc2015

@@ Line 14: / Line 14: @@
 -->
 {{2015 BASC:Section Template | Keynote}}
-[[File:DrJared.jpg|left]] '''AppSec: How It Fits into Digital Security'''
+'''"How I Teach Security"'''
-Securing code is important. But history has shown us that we can never be certain that our code is 100% perfect. This becomes particularly true in rapidly evolving environments. As an industry we need to take a broader look. What security features are provided by the hardware, OS, language, compiler, and even application type? Join us bright and early as Dr. DeMott kicks off the 2015 Boston Application Security Conference with a Keynote you won’t forget.
+Rob Cheyne, CEO, Big Brain Security, Executive Director, SOURCE Conference
-Dr. Jared DeMott is a seasoned security researcher, and has spoken at conferences such as DerbyCon, BlackHat, Defcon, ToorCon, Shakacon, DakotaCon, CarolinaCon, ThotCon, GRRCon, and Bsides*. Past notable research relates to stopping a trendy hacker exploit technique (known as ROP), by placing as a finalist in Microsoft’s BlueHat prize contest, and by more recently showing how to bypass Microsoft’s EMET protection tool.
+[[File:RobCheyne.jpg|left]]After spending over 10 years as a builder of software systems, and the next five years on the breaking side of things, I then spent over a decade teaching information security concepts to over 25,000 people around the world at leading global organizations.
-−
-Jared is active in the security community by teaching his
+Over the course of this work, I’ve noticed some interesting patterns across my body of students and clients.
-Application Security course, and has co-authored the book –
-Fuzzing for Software Security Testing and Quality Assurance.
+In most organizations, I have seen have at least one critical area of the business where basic information security best practices were not implemented where they should be. In many cases, this is because people are either not factoring in an accurate representation of infosec risks into their planning & project life cycles, or they willfully ignore them.
-DeMott has been on three winning Defcon CTF teams, and has the
-black badges to prove it. He has been an invited lecturer at
+The reason for this often boils down to one thing: the overall level of security awareness in most places is pretty low, even amongst developers, and even in organizations where you would think it should be a lot higher. Amongst business and management groups, it can be practically non-existent because security is still often assumed to be the purview of the security group, the infrastructure team, or the developers.
-prestigious institutions such as the United States Military
-Academy, and previously worked for the National Security Agency.
+In such an environment, business requirements often take precedence over security requirements, even when the security requirements are truly protecting the best interests of the business.
-DeMott holds a PhD from Michigan State University.<br clear=all>
+I have seen that many people within a typical organization:
--->
+* have little to no understanding of the actual risks they face.
 {{2015 BASC:Section Template | The Details}}

@@ Line 9: / Line 9: @@
 The BASC will be a free, one day, informal conference, aimed at increasing awareness and knowledge of application security in the greater Boston area. While many of the presentations will cover state-of-the-art application security concepts, the BASC is intended to appeal to a wide-array of attendees. Application security professionals, professional software developers, software quality engineers, computer science students, and security software vendors should be able to come to the BASC, learn, and hopefully enjoy themselves at the same time.
 == Call for Papers ==
 The [[BASC_2015_Call_For_Papers|Call For Papers]] is still open but will close soon!
+-->
 <!--

@@ Line 39: / Line 39: @@
 * Directions: [http://microsoftcambridge.com/About/Directions/tabid/89/Default.aspx NERD's website] or [http://maps.google.com/places/us/ma/cambridge/memorial-dr/1/-microsoft-new-england-research-and-development-center?hl=en&gl=us Google Maps]
 * [[2015_BASC_Agenda | Agenda]]
 * [[2015_BASC_Speakers | Speakers]]
 * [[2015_BASC_Presentations | Presentations]]
 * LinkedIn [https://www.linkedin.com/groups/Boston-Application-Security-Conference-BASC-4631647 Group]
 * Twitter: Follow [http://twitter.com/#!/BASConf @BASConf] HashTag: #basc2015
@@ Line 50: / Line 48: @@
 Admission to the BASC is free but [http://www.eventbrite.com/e/boston-application-security-conference-basc-2015-tickets-1783483447 registration] is required for breakfast, lunch, and the evening social time. We will do everything possible to accommodate late registrants but the facility and food are limited. [http://www.eventbrite.com/e/boston-application-security-conference-basc-2015-tickets-1783483447 Online registration] is now open and you are encouraged to register early.
 {{2015_BASC:Footer_Template | Welcome}}

@@ Line 45: / Line 45: @@
 * LinkedIn [https://www.linkedin.com/groups/Boston-Application-Security-Conference-BASC-4631647 Group]
 * Twitter: Follow [http://twitter.com/#!/BASConf @BASConf] HashTag: #basc2015
-<!-- * Sponsorships: [[2015_BASC_Sponsorship|Information on sponsoring BASC]] -->
+* [[Media:BASCSponsorship2015.docx|Sponsorship Kit]]
 {{2015 BASC:Section Template | Registration}}

@@ Line 5: / Line 5: @@
 == Welcome ==
-This is the homepage for the 2015 Boston Application Security Conference (BASC). This free conference will take place on Saturday, October 18<sup>th</sup> at [http://microsoftcambridge.com/Default.aspx Microsoft New England Research and Development Center (NERD)].  '''''Note the location is different from last year.'''''
+This is the homepage for the 2015 Boston Application Security Conference (BASC). This free conference will take place on Saturday, October 3<sup>rd</sup> at [http://microsoftcambridge.com/Default.aspx Microsoft New England Research and Development Center (NERD)].  '''''Note the location is different from last year.'''''
 The BASC will be a free, one day, informal conference, aimed at increasing awareness and knowledge of application security in the greater Boston area. While many of the presentations will cover state-of-the-art application security concepts, the BASC is intended to appeal to a wide-array of attendees. Application security professionals, professional software developers, software quality engineers, computer science students, and security software vendors should be able to come to the BASC, learn, and hopefully enjoy themselves at the same time.
@@ Line 35: / Line 35: @@
 {{2015 BASC:Section Template | The Details}}
-* Date: Saturday, October 18<sup>th</sup>, 2015
+* Date: Saturday, October 3<sup>rd</sup>, 2015
 * Location: [http://microsoftcambridge.com/Default.aspx NERD]
 * Directions: [http://microsoftcambridge.com/About/Directions/tabid/89/Default.aspx NERD's website] or [http://maps.google.com/places/us/ma/cambridge/memorial-dr/1/-microsoft-new-england-research-and-development-center?hl=en&gl=us Google Maps]

← Older revision		Revision as of 04:57, 11 September 2015
Line 1:		Line 1:
−	~~Save the date!~~

−	~~OWASP Boston will host the Boston Application Security Conference on October 3, 2015!~~	+	{{2015_BASC:Header_Template}}
		+	__NOTOC__

−	[[BASC_2015_Call_For_Papers\|Call For Papers]]	+	== Welcome ==
		+
		+	This is the homepage for the 2015 Boston Application Security Conference (BASC). This free conference will take place on Saturday, October 18<sup>th</sup> at [http://microsoftcambridge.com/Default.aspx Microsoft New England Research and Development Center (NERD)]. '''''Note the location is different from last year.'''''
		+
		+	The BASC will be a free, one day, informal conference, aimed at increasing awareness and knowledge of application security in the greater Boston area. While many of the presentations will cover state-of-the-art application security concepts, the BASC is intended to appeal to a wide-array of attendees. Application security professionals, professional software developers, software quality engineers, computer science students, and security software vendors should be able to come to the BASC, learn, and hopefully enjoy themselves at the same time.
		+
		+	== Call for Papers ==
		+	The [[BASC_2015_Call_For_Papers\|Call For Papers]] is still open but will close soon!
		+
		+
		+	<!--
		+
		+	{{2015 BASC:Section Template \| Keynote}}
		+
		+	[[File:DrJared.jpg\|left]] '''AppSec: How It Fits into Digital Security'''
		+
		+	Securing code is important. But history has shown us that we can never be certain that our code is 100% perfect. This becomes particularly true in rapidly evolving environments. As an industry we need to take a broader look. What security features are provided by the hardware, OS, language, compiler, and even application type? Join us bright and early as Dr. DeMott kicks off the 2015 Boston Application Security Conference with a Keynote you won’t forget.
		+
		+	Dr. Jared DeMott is a seasoned security researcher, and has spoken at conferences such as DerbyCon, BlackHat, Defcon, ToorCon, Shakacon, DakotaCon, CarolinaCon, ThotCon, GRRCon, and Bsides*. Past notable research relates to stopping a trendy hacker exploit technique (known as ROP), by placing as a finalist in Microsoft’s BlueHat prize contest, and by more recently showing how to bypass Microsoft’s EMET protection tool.
		+
		+	Jared is active in the security community by teaching his
		+	Application Security course, and has co-authored the book –
		+	Fuzzing for Software Security Testing and Quality Assurance.
		+	DeMott has been on three winning Defcon CTF teams, and has the
		+	black badges to prove it. He has been an invited lecturer at
		+	prestigious institutions such as the United States Military
		+	Academy, and previously worked for the National Security Agency.
		+	DeMott holds a PhD from Michigan State University.<br clear=all>
		+
		+	-->
		+
		+	{{2015 BASC:Section Template \| The Details}}
		+	* Date: Saturday, October 18<sup>th</sup>, 2015
		+	* Location: [http://microsoftcambridge.com/Default.aspx NERD]
		+	* Directions: [http://microsoftcambridge.com/About/Directions/tabid/89/Default.aspx NERD's website] or [http://maps.google.com/places/us/ma/cambridge/memorial-dr/1/-microsoft-new-england-research-and-development-center?hl=en&gl=us Google Maps]
		+	* [[2015_BASC_Agenda \| Agenda]]
		+	* [[2015_BASC_Speakers \| Speakers]]
		+	* [[2015_BASC_Presentations \| Presentations]]
		+	* LinkedIn [https://www.linkedin.com/groups/Boston-Application-Security-Conference-BASC-4631647 Group]
		+	* Twitter: Follow [http://twitter.com/#!/BASConf @BASConf] HashTag: #basc2015
		+	<!-- * Sponsorships: [[2015_BASC_Sponsorship\|Information on sponsoring BASC]] -->
		+
		+	{{2015 BASC:Section Template \| Registration}}
		+
		+	Admission to the BASC is free but [http://www.eventbrite.com/e/boston-application-security-conference-basc-2015-tickets-1783483447 registration]is required for breakfast, lunch, and the evening social time. We will do everything possible to accommodate late registrants but the facility and food are limited. [http://www.eventbrite.com/e/boston-application-security-conference-basc-2015-tickets-1783483447 Online registration] is now open and you are encouraged to register early.
		+
		+
		+	{{2015_BASC:Footer_Template \| Welcome}}

← Older revision		Revision as of 15:53, 3 July 2015
Line 3:		Line 3:
	OWASP Boston will host the Boston Application Security Conference on October 3, 2015!		OWASP Boston will host the Boston Application Security Conference on October 3, 2015!

−	[[~~BASC_2014_Call_For_Papers~~\|Call For Papers]]	+	[[BASC_2015_Call_For_Papers\|Call For Papers]]