Belgium Events 2019 - Revision history

LievenDesmet: /* Agenda */

2019-12-05T19:14:40Z

‎Agenda

LievenDesmet: update chapter meetings

2019-11-13T18:55:40Z

update chapter meetings

LievenDesmet: chapter meeting 25/11/2019

2019-11-13T18:36:49Z

chapter meeting 25/11/2019

Sdeleersnyder: /* Agenda */

2019-02-24T13:31:08Z

‎Agenda

Thomas Herlea: Aligned the 2019-02-20 section to the Belgium Chapter Meeting Template.

2019-02-06T17:18:43Z

Aligned the 2019-02-20 section to the Belgium Chapter Meeting Template.

Thomas Herlea: Added header with links to the previous and (not yet active) the following year.

2019-02-06T17:07:07Z

Added header with links to the previous and (not yet active) the following year.

LievenDesmet: Created page with "== 20 February 2019 Meeting == === Where === * Host: [https://distrinet.cs.kuleuven.be DistriNet Research Group (KU Leuven)] (Both speakers are faculty of the [https://www...."

2019-02-06T09:14:56Z

Created page with "== 20 February 2019 Meeting == === Where === * Host: [https://distrinet.cs.kuleuven.be DistriNet Research Group (KU Leuven)] (Both speakers are faculty of the [https://www...."

New page

== 20 February 2019 Meeting ==

=== Where ===

* Host: [https://distrinet.cs.kuleuven.be DistriNet Research Group (KU Leuven)] (Both speakers are faculty of the [https://www.secappdev.org/ Secure Application Development] course held in Leuven from 2019-02-18 to 2018-02-22.)

* Address ([http://googlemapsinterface.kuleuven.be/index.cgi?lang=N&nbol=(50.864186697481145,%204.678754210472107)&zoomlevel=17&plaatsnaam=Department+of+Computer+Science&maptype=roadmap map], [https://distrinet.cs.kuleuven.be/about/route/ directions]):
Department of Computer Science (foyer at ground floor)
Celestijnenlaan 200 A
3001 Heverlee

=== Agenda ===

*18h15 - 19h00: Welcome & sandwiches
*19h00 - 19h10: '''OWASP Update''' by Sebastien Deleersnyder (OWASP)
*19h10 - 20h00: '''CSP in the age of Script Gadgets''' by Prof. Martin Johns (TU Braunschweig)
*20h00 - 20h10: Break
*20h10 - 21h00: '''Zero to DevSecOps - security in a DevOps world''' by Jimmy Mesta (CTO, Manicode Security)

=== Program ===

==== CSP in the age of Script Gadgets ====

* Speaker: Prof. Martin Johns (TU Braunschweig)
* Presentation: (will be uploaded later)

''Abstract''

Content Security Policy (CSP) was first introduced in 2012. It should have been a silver-bullet defense against various injection attacks, including the rampant Cross-Site Scripting vulnerabilities. Unfortunately, modern development practices and legacy code bases proved to be substantial obstacles. New versions of CSP were released to address usability and compatibility for developers. Unfortunately, researchers discovered many bypasses and vulnerabilities in real-world CSP policies. The latest problem is known as script gadgets, where data is turned into code by legitimate functionality.

In this session, we will take a look at the problems you might encounter when deploying CSP. We start at CSP level 1 and work towards the latest level 3 version. We discuss CSP's features, potential bypasses, and pitfalls to avoid. In the end, you will have gained the knowledge to deploy a secure and effective CSP policy.

''Speaker Bio''

Martin Johns is a full professor at the TU Braunschweig.

==== Zero to DevSecOps - security in a DevOps world ====

* Speaker: Jimmy Mesta (CTO, Manicode Security)
* Presentation: (will be uploaded later)

''Abstract''

The way that software is being deployed is undergoing a massive transformation. As a result, security teams are at a point where they must adapt or be left in the dust. Traditional application security used to be heavyweight and human-driven. Tasks are more often than not mostly manual efforts. Time-consuming security testing often breaks down in an automated world. Dynamic vulnerability scanning and manual code reviews are incompatible with a world where code changes are automatically being pushed to production hundreds of times per day.

This talk will share lessons learned from helping teams of all sizes and maturity levels with their transformation to a DevSecOps model where security goes from being a blocker to an enabler. Specifically, we will cover some of the tools and processes you can start using right now. These tools allow you to start adding real value to your organization through enhanced visibility, vulnerability discovery, and feedback loops. It is time to adapt and embrace a new era of security.

''Speaker Bio''

Jimmy Mesta is CTO at Manicode Security. He is a DevSecOps, Mobile, and Kubernetes Secure Coding Instructor.

=== Registration ===

Registration via EventBrite: https://owasp-belgium-2019-02-20.eventbrite.com.

=== Coverage ===

n/a

@@ Line 20: / Line 20: @@
 *18h00 - 19h00: Welcome & networking
-*19h00 - 19h10: ''OWASP Update''
+*19h00 - 19h10: ''[https://www.owasp.org/images/a/a3/Owasp_be_update_20191125.pdf OWASP Update]'' by Lieven Desmet (OWASP BE)
-*19h10 - 20h00: ''Recent evolutions in the OAuth 2.0 and OpenID Connect landscape'' by Philippe De Ryck (Founder of Pragmatic Web Security and Google Developer Expert)
+*19h10 - 20h00: ''[https://www.owasp.org/images/3/39/Owasp-be-20191125-deryck-recentevolutionsoauth.pdf Recent evolutions in the OAuth 2.0 and OpenID Connect landscape]'' by Philippe De Ryck (Founder of Pragmatic Web Security and Google Developer Expert)
-*20u00-20u50: ''Detection and Prevention of DNS abuse in .eu TLD'' by Lieven Desmet (DistriNet, KU Leuven)
+*20u00 - 20u50: ''[https://www.owasp.org/images/2/23/Owasp-be-2019-11-25-desmet.pdf Detection and Prevention of DNS abuse in .eu TLD]'' by Lieven Desmet (DistriNet, KU Leuven)
 === Program ===

@@ Line 60: / Line 60: @@
 n/a
+Registration via https://www.eventbrite.com/e/open-security-summit-working-session-tickets-60456102831
 == 20 February 2019 Meeting ==

@@ Line 5: / Line 5: @@
 <!-- Next year: [[Belgium Events 2020|2020]].-->
 </noinclude>
 == 20 February 2019 Meeting ==

@@ Line 29: / Line 29: @@
 *18h15 - 19h00: Welcome & sandwiches
-*19h00 - 19h10: <!--[[Media:OWASP_UPDATE_PRESENTATION|OWASP Update]--> ''OWASP Update'' by Sebastien Deleersnyder (OWASP)
+*19h00 - 19h10: ''[https://www.owasp.org/images/6/69/Owasp_Belgium_update_2019-02-20_v1.pdf OWASP Update]'' by Sebastien Deleersnyder (OWASP)
-*19h10 - 20h00: <!--[[Media:SLIDES_TALK_1|CSP in the age of Script Gadgets])--> ''CSP in the age of Script Gadgets'' by Prof. Martin Johns (TU Braunschweig)
+*19h10 - 20h00: '[https://www.owasp.org/images/5/54/CSP_Martin_Johns_OWASP_BE.pdf 'CSP in the age of Script Gadgets]'' by Prof. Martin Johns (TU Braunschweig)
 *20h00 - 20h10: Break
-*20h10 - 21h00: <!--[[Media:SLIDES_TALK_2|Zero to DevSecOps - security in a DevOps world]]--> ''Zero to DevSecOps - security in a DevOps world'' by Jimmy Mesta (CTO, Manicode Security)
+*20h10 - 21h00: ''Zero to DevSecOps - security in a DevOps world'' (part [https://www.owasp.org/images/7/7d/Zero-to-DevSecOps-OWASP-Meetup-02-19-19_-_part_0.pdf 1], [https://www.owasp.org/images/3/3a/Zero-to-DevSecOps-OWASP-Meetup-02-19-19_-_part_1.pdf 2], [https://www.owasp.org/images/0/0c/Zero-to-DevSecOps-OWASP-Meetup-02-19-19_-_part_2.pdf 3]) by Jimmy Mesta (CTO, Manicode Security)
 === Program ===

← Older revision		Revision as of 17:07, 6 February 2019
Line 1:		Line 1:
		+	<noinclude>
		+	These are the 2019 events of the [[Belgium\|OWASP Belgium Chapter]]. <!-- Copy the source from [[Belgium Chapter Meeting Template]] to start a new chapter meeting event! -->
		+
		+	Previous year: [[Belgium Events 2018\|2018]].
		+	<!-- Next year: [[Belgium Events 2020\|2020]].-->
		+	</noinclude>
	== 20 February 2019 Meeting ==		== 20 February 2019 Meeting ==

@@ Line 6: / Line 6: @@
 </noinclude>
 == 20 February 2019 Meeting ==
 === Where  ===
@@ Line 19: / Line 29: @@
 *18h15 - 19h00: Welcome & sandwiches
-*19h00 - 19h10: '''OWASP Update''' by Sebastien Deleersnyder (OWASP)
+*19h00 - 19h10: <!--[[Media:OWASP_UPDATE_PRESENTATION|OWASP Update]--> ''OWASP Update'' by Sebastien Deleersnyder (OWASP)
-*19h10 - 20h00: '''CSP in the age of Script Gadgets''' by Prof. Martin Johns (TU Braunschweig)
+*19h10 - 20h00: <!--[[Media:SLIDES_TALK_1|CSP in the age of Script Gadgets])--> ''CSP in the age of Script Gadgets'' by Prof. Martin Johns (TU Braunschweig)
 *20h00 - 20h10: Break
-*20h10 - 21h00: '''Zero to DevSecOps - security in a DevOps world''' by Jimmy Mesta (CTO, Manicode Security)
+*20h10 - 21h00: <!--[[Media:SLIDES_TALK_2|Zero to DevSecOps - security in a DevOps world]]--> ''Zero to DevSecOps - security in a DevOps world'' by Jimmy Mesta (CTO, Manicode Security)
 === Program ===
@@ Line 28: / Line 38: @@
 ==== CSP in the age of Script Gadgets ====
-* Speaker: Prof. Martin Johns (TU Braunschweig)
+* Speaker: <!--[LINK_PRESENTER_TALK_1 Prof. Martin Johns]--> Prof. Martin Johns (TU Braunschweig)
-* Presentation: (will be uploaded later)
+* Presentation: <!--[[:File:SLIDES_TALK_1]]--> not yet available
 ''Abstract''
@@ Line 43: / Line 53: @@
 ==== Zero to DevSecOps - security in a DevOps world ====
-* Speaker: Jimmy Mesta (CTO, Manicode Security)
+* Speaker: <!--[LINK_PRESENTER_TALK_2 Jimmy Mesta]--> Jimmy Mesta (CTO, Manicode Security)
-* Presentation: (will be uploaded later)
+* Presentation: <!--[[:File:SLIDES_TALK_2]]--> not yet available
 ''Abstract''
@@ Line 58: / Line 68: @@
 === Registration  ===
-Registration via EventBrite: https://owasp-belgium-2019-02-20.eventbrite.com.
+Registration is via EventBrite: https://owasp-belgium-2019-02-20.eventbrite.com.
 === Coverage ===
 n/a