AppSec US 2010, CA - Revision history

KateHartmann at 21:21, 18 October 2010

2010-10-18T21:21:43Z

Richard greenberg at 08:41, 14 September 2010

2010-09-14T08:41:12Z

Nmatatal: /* Welcome to AppSec USA 2010 */

2010-09-12T23:45:12Z

‎Welcome to AppSec USA 2010

Paulo Coimbra at 18:23, 9 September 2010

2010-09-09T18:23:15Z

Paulo Coimbra at 18:22, 9 September 2010

2010-09-09T18:22:14Z

Paulo Coimbra at 18:20, 9 September 2010

2010-09-09T18:20:42Z

Paulo Coimbra at 18:19, 9 September 2010

2010-09-09T18:19:34Z

Paulo Coimbra at 18:17, 9 September 2010

2010-09-09T18:17:36Z

Paulo Coimbra at 18:16, 9 September 2010

2010-09-09T18:16:42Z

Paulo Coimbra at 18:15, 9 September 2010

2010-09-09T18:15:36Z

@@ Line 8: / Line 8: @@
 Before you head to SoCal on Thursday, be sure to check out our [http://www.owasp.org/images/2/25/AppSec_USA_2010_Visitors_Guide_%283%29.pdf Visitors Guide]
 {| class="FCK__ShowTableBorders" style="width: 100%;"
@@ Line 25: / Line 14: @@
 {| class="FCK__ShowTableBorders" style="width: 100%; background: none repeat scroll 0% 0% transparent; -moz-background-inline-policy: continuous;"
 |-
-| style="width: 95%; color: rgb(0, 0, 0);" | AppSec attendees and OWASP members save $400 at the Hackers Halted conference this October in Miami:<br>Register with promo code - HHUSA-LEO-OWP99<br>
+| style="width: 95%; color: rgb(0, 0, 0);" |'''AppSec US 2010 VIDEOS available [http://vimeo.com/user4863863/videos HERE]'''<br>
 |}

@@ Line 7: / Line 7: @@
 = Welcome to AppSec&nbsp;USA 2010  =
 Before you head to SoCal on Thursday, be sure to check out our [http://www.owasp.org/images/2/25/AppSec_USA_2010_Visitors_Guide_%283%29.pdf Visitors Guide]
 {| width="100%" border="0" align="center" class="FCK__ShowTableBorders"
@@ Line 25: / Line 25: @@
 {| class="FCK__ShowTableBorders" style="width: 100%; background: none repeat scroll 0% 0% transparent; -moz-background-inline-policy: continuous;"
 |-
-| style="width: 95%; color: rgb(0, 0, 0);" |
+| style="width: 95%; color: rgb(0, 0, 0);" | AppSec attendees and OWASP members save $400 at the Hackers Halted conference this October in Miami:<br>Register with promo code - HHUSA-LEO-OWP99<br>
 |}
@@ Line 70: / Line 69: @@
 |-
-| style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | Instructor: [[user:Wichers|Dave Wichers]]: [[Image:Aspect logo.gif]]
+| style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | Instructor: [[User:Wichers|Dave Wichers]]: [[Image:Aspect logo.gif]]
 |-
 | style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | [[Learn More about the Building Secure Ajax and Web 2.0 Applications Class]]
@@ Line 92: / Line 91: @@
 | style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | In this two-day management session you’ll get an industry perspective of application security, understand the key vulnerabilities to applications, be able to analyze root cause, and provide practical and proven techniques in building out an application security initiative. This course gives executives and managers the education and practical guidance they need to ensure that software projects properly address security. The course is designed to provide a firm understanding of the importance of software security, the critical security activities required within the software development lifecycle, and how to efficiently manage security issues during development and maintenance. This understanding is reinforced through industry awareness, live demonstrations of commonly found application vulnerabilities and workgroup exercises allowing attendees to conduct capability assessments and recommend improvement plans.
 |-
-| style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | Instructor: [[user:Jeff Williams|Jeff Williams]]: [[Image:Aspect logo.gif]]
+| style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | Instructor: [[User:Jeff Williams|Jeff Williams]]: [[Image:Aspect logo.gif]]
 |-
 | style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | [[Learn More about the Application Security Leadership Essentials Class]]
@@ Line 144: / Line 143: @@
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 08:45-9:30
-| align="center" colspan="3" style="width: 80%; background: none repeat scroll 0% 0% rgb(252, 252, 150);" | Keynote: [[user:Jeff Williams|Jeff Williams]] (Crystal Cove Auditorium)
+| align="center" colspan="3" style="width: 80%; background: none repeat scroll 0% 0% rgb(252, 252, 150);" | Keynote: [[User:Jeff Williams|Jeff Williams]] (Crystal Cove Auditorium)
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 9:30-10:15
@@ Line 199: / Line 198: @@
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 16:25-17:10
 | align="center" colspan="3" style="width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);" | Panel Discussion: Security Trends: Jeremiah Grossman, Robert Hansen. Moderator: Stuart Schwartz
+| <br>
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 17:10-17:30
 | align="center" colspan="3" style="width: 90%; background: none repeat scroll 0% 0% rgb(242, 242, 242);" | Mozilla Announcement: Content Security Policy
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 17:30-18:00
@@ Line 263: / Line 260: @@
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 14:05-14:50
-| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | ''Panel Discussion: Vulnerability Lifecycle for Software Vendors<br>
+| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | ''Panel Discussion: Vulnerability Lifecycle for Software Vendors<br>''
-Edward Bonver - Principal Software Engineer, Symantec (moderator)<br>
+Edward Bonver - Principal Software Engineer, Symantec (moderator)<br> Kelly FitzGerald, Senior Vulnerability Analyst, Symantec<br> Katie Moussouris, Senior Security Strategist, Microsoft<br> John Steven, Senior Director, Cigital <br> Daniel Holden, Director, DVLabs, HP, TippingPoint<br>
 Kelly FitzGerald, Senior Vulnerability Analyst, Symantec<br>
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 165, 122);" | Agile + Security = FAIL, ''Adrian Lane''<br>
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Bug-Alcoholic 2.0 - Untamed World of Web Vulnerabilities, ''Aditya K. Sood''
@@ Line 278: / Line 271: @@
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 15:10-15:55
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | Escalating Privileges through Database Trusts, ''Scott Sutherland and Antti Rantasaari, NetSPI''<br>
-| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 165, 122);" | Panel Discussion: Defining the Identity Management Framework, ''
+| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 165, 122);" | Panel Discussion: Defining the Identity Management Framework,
-Barbara Danzi, Garda Cash Logistics (moderator)<br>
+Barbara Danzi, Garda Cash Logistics (moderator)<br> Richard Tychansky, Lockheed Martin<br> [[User:Jeff Williams|Jeff Williams]], Aspect Security<br> Hord Tipton, (ISC)²<br> [[Manoranjan (Mano) Paul|Mano Paul]], SecuRisk Solutions<br> ''<br> ''
 Richard Tychansky, Lockheed Martin<br>
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Breaking Web Browsers, ''Jeremiah Grossman, WhiteHat Security''
 |-
@@ Line 306: / Line 295: @@
 <br>
 <br>
 = Gold Sponsors  =

@@ Line 26: / Line 26: @@
 |-
 | style="width: 95%; color: rgb(0, 0, 0);" |
 |}

@@ Line 247: / Line 247: @@
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | Security Architecting Applications for the Cloud, ''Alex Stamos, iSEC Partners''<br>
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 165, 122);" | Unraveling Cross-Technology, Cross-Domain Trust Relations, ''Peleus Uhley, Adobe''<br>
-| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Real Time Application Defenses - The Reality of [[:Category:OWASP AppSensor Project|AppSensor]] &amp; ESAPI, ''[User:MichaelCoates|Michael Coates]], Mozilla,''
+| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Real Time Application Defenses - The Reality of [[:Category:OWASP AppSensor Project|AppSensor]] &amp; ESAPI, ''[[User:MichaelCoates|Michael Coates]], Mozilla,''
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 10:55-11:15

@@ Line 194: / Line 194: @@
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | Smart Phones with Dumb Apps: Threat Modeling for Mobile Applications, ''Dan Cornell, Denim Group''<br>
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 165, 122);" | Assessing, Testing and Validating Flash Content, ''Peleus Uhley, Adobe''<br>
-| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Tour of OWASP Projects,<br> ''[[User:Dinis.cruz|Dinis Cruz]], OWASP''
+| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | [[OWASP/Training/Guided tour of OWASP Projects|Tour of OWASP Projects]],<br> ''[[User:Dinis.cruz|Dinis Cruz]], OWASP''
 ----

@@ Line 166: / Line 166: @@
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 11:30-12:15
-| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | State of SSL on the Internet - 2010 Survey, Results and Conclusions, ''Ivan Ristic, Qualys''<br>
+| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | State of SSL on the Internet - 2010 Survey, Results and Conclusions, ''[[User:Ivanr|Ivan Ristic]], Qualys''<br>
 <br>

@@ Line 160: / Line 160: @@
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 133, 122);" | How I met your Girlfriend, ''Samy Kamkar''<br>
 | align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(188, 165, 122);" | Solving Real-World Problems with an Enterprise Security API (ESAPI), ''Chris Schmidt, ServiceMagic''<br>
-| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Panel Discussion: Characterizing Software Security as a Mainstream Business Risk – How to talk to other CXO’s about Software Security<br>John Dickson - Principal, Denim Group (moderator)<br>Tom Brennan - CEO Proactive Risk, OWASP Board Member<br>Ed Pagett, CISO, Lender Processing Services<br>Richard Greenberg, Information Security Officer, Los Angeles County Department of Public Health<br> John Sapp - IT Governance, Risk &amp; Compliance Manager, McKesson
+| align="left" style="width: 30%; background: none repeat scroll 0% 0% rgb(153, 255, 153);" | Panel Discussion: Characterizing Software Security as a Mainstream Business Risk – How to talk to other CXO’s about Software Security<br>John Dickson - Principal, Denim Group (moderator)<br>[[User:Tbrennan|Tom Brennan]] - CEO Proactive Risk, OWASP Board Member<br>Ed Pagett, CISO, Lender Processing Services<br>Richard Greenberg, Information Security Officer, Los Angeles County Department of Public Health<br> John Sapp - IT Governance, Risk &amp; Compliance Manager, McKesson
 |-
 | style="width: 10%; background: none repeat scroll 0% 0% rgb(123, 138, 189);" | 11:20-11:30

@@ Line 121: / Line 121: @@
 Students are encouraged to bring a laptop to class. The virtualization software for OWASP WTE runs on Windows, OS X and Linux. Students with a laptop can follow along with the in class demonstrations to get hands on testing experience
-<br>Instructors: Matt Tesauro and Charles Henderson: [[Image:TrustwaveLogo.jpg]]
+<br>Instructors: [[User:Mtesauro|Matt Tesauro]] and Charles Henderson: [[Image:TrustwaveLogo.jpg]]
 |-

@@ Line 106: / Line 106: @@
 |-
 | style="background: none repeat scroll 0% 0% rgb(242, 242, 242);" | This class teaches attendees how to fix security vulnerabilities in existing software. It provides a mix of discussion of project concerns for planning and managing remediation efforts with hands-on coding examples fixing specific vulnerabilities. Attendees will learn how to risk-rank vulnerabilities, estimate remediation tasks, perform coding fixes for vulnerabilities and demonstrate the effectiveness of fixes applied. The focus is on the practical: how to use limited resources to make significant improvements to the security of target applications. Code examples use the OWASP ESAPI Java and Microsoft Web Protection Library. Many classes teach developers how to build secure code from the ground up or teach security analysts how to test applications for security vulnerabilities. This class teaches developers and security analysts how to deal with their existing portfolio of insecure applications.
-Instructor: Dan Cornell: [[Image:AppSecDC2009-Sponsor-denim.gif]]
+Instructor: [[User:Dancornell|Dan Cornell]]: [[Image:AppSecDC2009-Sponsor-denim.gif]]
 |-