Netherlands October 31, 2013 - Revision history

Knoblochmartin: /* Presentations */

2013-11-04T22:35:33Z

‎Presentations

Knoblochmartin at 12:48, 1 November 2013

2013-11-01T12:48:46Z

Knoblochmartin: /* Third Party Java Libraries for Secure Development */

2013-11-01T10:27:23Z

‎Third Party Java Libraries for Secure Development

Knoblochmartin: added speakers and venue details & presentation abstracts

2013-10-03T12:17:24Z

added speakers and venue details & presentation abstracts

Knoblochmartin at 13:06, 5 September 2013

2013-09-05T13:06:51Z

Knoblochmartin: Created page with "; OWASP Netherland Wiki ; All OWASP NL Events 2013 = October 31, 2013 = "To be decided" ==Programme== :18:30 - 19:15 R..."

2013-09-05T13:04:01Z

Created page with "; OWASP Netherland Wiki ; All OWASP NL Events 2013 = October 31, 2013 = "To be decided" ==Programme== :18:30 - 19:15 R..."

New page

;[[Netherlands | OWASP Netherland Wiki]]
;[[Netherlands_Previous_Events_2013 | All OWASP NL Events 2013]]
= October 31, 2013 =
"To be decided"
==Programme==
:18:30 - 19:15 Registration & Pizza
:19:15 - 20:00 1st talk - 1st speaker
:20:00 - 20:15 Break
:20:15 - 21:00 2nd talk - 2nd speaker
:21:00 - 21:30 Networking

==Presentations==
===To be decided===

==Speakers==
===[[User:EoinKeary |Eoin Keary]]===
CTO and founder of BCC Risk Advisory Ltd.

===[[User:Jmanico|Jim Manico]]===
Jim Manico is the VP of Security Architecture for WhiteHat Security, a web security firm. He authors and delivers developer security awareness training for WhiteHat Security and has a background as a software developer and architect. Jim is also a global board member for the OWASP foundation. He manages and participates in several OWASP projects, including the OWASP cheat sheet series and the OWASP podcast series.

===Chris Eng===

==Venue==
To be decided
==Sponsor==

@@ Line 25: / Line 25: @@
 In this session, we’ll discuss how Veracode has incorporated security into our own Agile development lifecycle for a product that involves anywhere from two to seven Scrum teams working in concert to ship monthly releases. We do this without designating any security experts full-time to the project. We’ll explain how we’ve evolved our practices to optimize the way our security research team interacts with our engineering teams and accommodates their processes. We’ll also talk about some of the lessons we’ve learned along the way, including things that haven’t worked or wouldn’t scale, and how other organizations can use our experience to integrate security practices into their own Agile development programs.
 *[https://www.its.fh-muenster.de/owasp-appseceu13/rooms/Grosser_Saal/high_quality/OWASP-AppsecEU13-ChrisEngRyanOBoyle-FromtheTrenchesReal-WorldAgileSDLC_720p.mp4 Recording at AppSec-EU]
 ==Speakers==

@@ Line 17: / Line 17: @@
 open source Java projects that are essential tools to help you construct
 a secure web applications.
-[[Media:Top_10_Java_Defenses_for_Website_Security-Jim_Manico.pdf | Download the presentation as PDF]]
+*[[Media:Top_10_Java_Defenses_for_Website_Security-Jim_Manico.pdf | Download the presentation as PDF]]
 ===From the Trenches: Real-World Agile SDLC===
@@ Line 24: / Line 24: @@
 In this session, we’ll discuss how Veracode has incorporated security into our own Agile development lifecycle for a product that involves anywhere from two to seven Scrum teams working in concert to ship monthly releases. We do this without designating any security experts full-time to the project. We’ll explain how we’ve evolved our practices to optimize the way our security research team interacts with our engineering teams and accommodates their processes. We’ll also talk about some of the lessons we’ve learned along the way, including things that haven’t worked or wouldn’t scale, and how other organizations can use our experience to integrate security practices into their own Agile development programs.
 ==Speakers==

@@ Line 10: / Line 10: @@
 ==Presentations==
-===Third Party Java Libraries for Secure Development===
+===Top 10 Java Defenses for Website Security===
 by Jim Manico
@@ Line 17: / Line 17: @@
 open source Java projects that are essential tools to help you construct
 a secure web applications.
 ===From the Trenches: Real-World Agile SDLC===
 by Chris Eng & Ryan O’Boyle

@@ Line 2: / Line 2: @@
 ;[[Netherlands_Previous_Events_2013 | All OWASP NL Events 2013]]
 = October 31, 2013 =
 ==Programme==
 :18:30 - 19:15  Registration & Pizza
-:19:15 - 20:00  1st talk - 1st speaker
+:19:15 - 20:00  Third Party Java Libraries for Secure Development - Jim Manico
 :20:00 - 20:15  Break
-:20:15 - 21:00  2nd talk - 2nd speaker
+:20:15 - 21:00  From the Trenches: Real-World Agile SDLC - Chris Eng & Ryan O’Boyle
 :21:00 - 21:30  Networking
 ==Presentations==
-===To be decided===
+===Third Party Java Libraries for Secure Development===
 ==Speakers==
 ===[[User:Jmanico|Jim Manico]]===
-Jim Manico is the VP of Security Architecture for WhiteHat Security, a web security firm. He authors and delivers developer security awareness training for WhiteHat Security and has a background as a software developer and architect. Jim is also a global board member for the OWASP foundation. He manages and participates in several OWASP projects, including the OWASP cheat sheet series and the OWASP podcast series.
+'''Jim Manico''' is the VP of Security Architecture for WhiteHat Security, a web and application security firm. He authors and delivers developer security awareness training for WhiteHat Security and has a 20 year history building software as a developer and architect. Jim is also a global board member for the OWASP foundation where he helps drive the strategic vision for the organization. He manages and participates in several OWASP projects, including the OWASP cheat sheet series and several secure coding projects.
+For more information, see http://www.linkedin.com/in/jmanico.
-===[User:Chris_Eng |Chris Eng]===
+===[[User:Chris_Eng |Chris Eng]]===
-Sr. Director of Research at Veracode
+Chris Eng is Vice President of Research at Veracode. Chris is a sought after speaker at industry conferences, and has presented at events such as BlackHat, RSA, OWASP, and CanSecWest. In addition to presenting on a diverse set of application security topics, including cryptographic attacks, testing methodologies, mobile application security, and security metrics, Chris frequently comments on software security trends for media outlets worldwide. Throughout his career at organizations such as NSA, @stake, and Veracode, Chris has led projects breaking, building and defending software
 ==Venue==
-To be decided
+[http://www.surfnet.nl/nl/organisatie/Pages/routebeschrijving.aspx SURFnet - Radboudkwartier 273, 3511 CK Utrecht]
 ==Sponsor==