Denver September 2010 meeting - Revision history

Eduprey at 17:44, 21 September 2010

2010-09-21T17:44:26Z

Eduprey at 01:40, 15 September 2010

2010-09-15T01:40:02Z

Eduprey at 01:38, 15 September 2010

2010-09-15T01:38:26Z

Eduprey at 01:15, 15 September 2010

2010-09-15T01:15:26Z

Eduprey at 17:08, 13 September 2010

2010-09-13T17:08:14Z

Eduprey: added creds stuff :)

2010-09-12T02:42:18Z

added creds stuff :)

Eduprey at 02:40, 12 September 2010

2010-09-12T02:40:07Z

Eduprey at 02:38, 12 September 2010

2010-09-12T02:38:22Z

Eduprey: grammatical fix

2010-09-12T02:27:43Z

grammatical fix

Eduprey: created

2010-09-12T02:20:27Z

created

New page

== Wednesday 29 September 2010, 6pm @ [http://maps.google.com/maps?f=q&source=s_q&hl=en&q=hosting.com&sll=39.699262,-104.986725&sspn=0.159814,0.258522&ie=UTF8&radius=8.24&split=1&rq=1&ev=zi&hq=hosting.com&hnear=&ll=39.699262,-104.986725&spn=0.159814,0.258522&z=12&iwloc=A Hosting.com] [http://denverowasp.eventbrite.com/ RSVP Now!] ==

=== Eric Duprey: "Application Vulnerability Shooting Gallery" ===
''How vulnerabilities make it into your business applications, how to find them, and how to kill them - Laptop recommended''

Despite years of publicity, the common classes of web application vulnerabilities remain essentially unchanged. Lists of the most common and important vulnerabilities in application software (the OWASP Top 10, for example) are nearly identical from 2003 to today, and the prevalence of these vulnerabilities remains alarmingly high. One thing that is still clearly lacking is awareness of common and serious vulnerabilities, how they are detected, how they are exploited, and how they can be systematically eliminated.

This is a hands-on presentation which will demonstrate common vulnerabilities in various real-world-like applications. It will cover discovering vulnerabilities, identifying them in source code, and uniform ways to fix these vulnerabilities using open and freely available tools.

(It is recommended to bring a laptop to this event if possible -- while it is possible to gain benefit from the presentation without it, having a laptop present will enable you to jump into hands-on tactical examples in real-time)

Presenter: '''Eric Duprey'''

Eric Duprey is the co-chapter-leader of the Denver OWASP Chapter. For several years, Eric has been performing application security assessments, penetration testing and source code for major enterprise companies and working with application developers to remediate vulnerable code.

=== Agenda ===
* 6pm: Pizza & pop, courtesy of [http://hosting.com/ Hosting.com]
* 6:30pm: Introduction and Chapter business
* 6:45pm --> 8pm: Presentation

[https://www.owasp.org/index.php/Denver Back to OWASP Denver]

@@ Line 16: / Line 16: @@
 Presenter: '''Eric Duprey'''
-Eric Duprey is the co-chapter-leader of the Denver OWASP Chapter.  For several years, Eric has been performing application security assessments, penetration testing and source code review for major enterprise companies and working with application developers to remediate vulnerable code.  Eric has presented talks at major security conferences including DEFCON and SANS penetration testing summit.
+Eric Duprey is the co-chapter-leader of the Denver OWASP Chapter and a Senior Security Consultant with FishNet Security.  For several years, Eric has been performing application security assessments, penetration testing and source code review for major enterprise companies and working with application developers to remediate vulnerable code.  Eric has presented talks at major security conferences including DEFCON and SANS penetration testing summit.
 === Agenda ===

← Older revision		Revision as of 01:15, 15 September 2010
Line 1:		Line 1:
−	== Wednesday 29 September 2010, 6pm @ [http://maps.google.com/maps?f=q&source=s_q&hl=en&q=hosting.com&sll=39.699262,-104.986725&sspn=0.159814,0.258522&ie=UTF8&radius=8.24&split=1&rq=1&ev=zi&hq=hosting.com&hnear=&ll=39.699262,-104.986725&spn=0.159814,0.258522&z=12&iwloc=A Hosting.com] [http://denverowasp.eventbrite.com/ RSVP Now!] ==	+	== Wednesday 22 September 2010, 6pm @ [http://maps.google.com/maps?f=q&source=s_q&hl=en&q=hosting.com&sll=39.699262,-104.986725&sspn=0.159814,0.258522&ie=UTF8&radius=8.24&split=1&rq=1&ev=zi&hq=hosting.com&hnear=&ll=39.699262,-104.986725&spn=0.159814,0.258522&z=12&iwloc=A Hosting.com] [http://denverowasp.eventbrite.com/ RSVP Now!] ==

	=== Eric Duprey: "Application Vulnerability Shooting Gallery" ===		=== Eric Duprey: "Application Vulnerability Shooting Gallery" ===

@@ Line 16: / Line 16: @@
 Presenter: '''Eric Duprey'''
-Eric Duprey is the co-chapter-leader of the Denver OWASP Chapter.  For several years, Eric has been performing application security assessments, penetration testing and source code review for major enterprise companies and working with application developers to remediate vulnerable code.
+Eric Duprey is the co-chapter-leader of the Denver OWASP Chapter.  For several years, Eric has been performing application security assessments, penetration testing and source code review for major enterprise companies and working with application developers to remediate vulnerable code.  Eric has presented talks at major security conferences including DEFCON and SANS penetration testing summit.
 === Agenda ===

@@ Line 22: / Line 22: @@
 * 6:30pm: Introduction and Chapter business
 * 6:45pm --> 8pm: Presentation
-* 8pm onward:  Beer and ping pong hosted by Hosting.com
+* 8pm and later:  Beer and ping pong hosted by Hosting.com
 [https://www.owasp.org/index.php/Denver Back to OWASP Denver]

@@ Line 3: / Line 3: @@
 === Eric Duprey: "Application Vulnerability Shooting Gallery" ===
 ''How vulnerabilities make it into your business applications, how to find them, and how to kill them - Laptop recommended''
 Despite years of publicity, the common classes of web application vulnerabilities remain essentially unchanged.   Lists of the most common and important vulnerabilities in application software (the OWASP Top 10, for example) are nearly identical from 2003 to today, and the prevalence of these vulnerabilities remains alarmingly high.  One thing that is still clearly lacking is awareness of common and serious vulnerabilities, how they are detected, how they are exploited, and how they can be systematically eliminated.
 This is a hands-on presentation which will demonstrate common vulnerabilities in various real-world-like applications.  It will cover discovering vulnerabilities at runtime, identifying them in source code, and uniform ways to fix these vulnerabilities using open and freely available tools.
 (It is recommended to bring a laptop to this event if possible -- while it is possible to gain benefit from the presentation without it, having a laptop present will enable you to jump into hands-on tactical examples in real-time)
 Presenter: '''Eric Duprey'''