OWASP AppSec India Conference 2008 AppSec For Managers - Revision history

Dhruvsoi: /* About Instructor */

2008-07-02T17:58:50Z

‎About Instructor

Dhruvsoi: /* About Instructor */

2008-07-02T17:57:14Z

‎About Instructor

Dhruvsoi: /* About Instructor */

2008-07-02T17:56:27Z

‎About Instructor

Dhruvsoi: /* About Instructor */

2008-07-02T17:55:58Z

‎About Instructor

Dhruvsoi: /* Students who take this course will be able to */

2008-07-02T17:52:40Z

‎Students who take this course will be able to

Dhruvsoi: /* Who Should Attend */

2008-07-02T17:52:04Z

‎Who Should Attend

Dhruvsoi: New page: == Application Security for Managers == === Summary === Most of the current effort in Application Security is directed towards securing applications after deployment to production. In an ...

2008-07-02T17:51:19Z

New page: == Application Security for Managers == === Summary === Most of the current effort in Application Security is directed towards securing applications after deployment to production. In an ...

New page

== Application Security for Managers ==

=== Summary ===
Most of the current effort in Application Security is directed towards securing applications after deployment to production.
In an ideal environment however, security is at the forefront of daily operations, saving an organization time and money. This course aims to make this a reality by teaching executives and information security managers their important role in Application Security, giving them a general understanding of the threat landscape, and outlining the controls they may use to start or enhance their current Application Security Program. A major case study and various demonstration based components are used to guide students in understanding their role and how they can improve their organization's overall security posture.

=== Course Overview ===
Part 1 : Application Security - The Threat Landscape Part 2 : Application Security - Architecture & Security Principles Part 3 : Secure SDLC

=== Students who take this course will be able to ===
* Understand the threat landscape in application security
* Acquire the toolset required for securing and assessing their applications
* Learn aspects of Secure SDLC
* Be able to articulate a plan to start an Application Security Program
* Learn metrics to aid in assessing organization's application security posture
* Be able to confidently promote application security throughout the organization

=== Who Should Attend ===
* CISO's and CSO's
* Information security managers
* Introduction to concepts of Application Security
* Designated security experts
* Anyone with a desire to understand application security

== About Instructor ==
[[Image:Jason_Li.jpg|thumb|100px|frame|left|Jason Li]]
Jason is a Senior Application Security Engineer at Aspect Security during which time he has performed code reviews, penetration testing and training at a variety of financial, commercial, and government institutions. He is a certified GIAC Secure Software Programmer in Java and before joining Aspect, he was a Java Software Developer and a Java course instructor for Johns Hopkins University. He is currently working on the OWASP UI Verification Project and along with Arshan Dabirsiaghi, he is a core developer of the OWASP AntiSamy Project. Jason received his Post-Master's in Computer Science with a concentration in Information Security from Johns Hopkins University and both his Master's and B.S in Computer Science from Cornell University.

@@ Line 25: / Line 25: @@
 == About Instructor ==
-[[Image:Nish_Head.jpg|thumb|100px|frame|left|Nish Bhalla]]
+[[Image:Nish_Head.jpg|thumb|10px|frame|left|Nish Bhalla]]
 <b>Nishchal Bhalla</b> is the founder of Security Compass, an Application Security Consulting and Training company. He has over 13 years industry experience.

@@ Line 25: / Line 25: @@
 == About Instructor ==
-[[Image:Nish_Head.jpg|thumb|100px|frame|left|Jason Li]]
+[[Image:Nish_Head.jpg|thumb|100px|frame|left|Nish Bhalla]]
 <b>Nishchal Bhalla</b> is the founder of Security Compass, an Application Security Consulting and Training company. He has over 13 years industry experience.

@@ Line 25: / Line 25: @@
 == About Instructor ==
-[[Image:https://www.owasp.org/images/thumb/b/b1/Nish_Head.jpg/450px-Nish_Head.jpg|thumb|100px|frame|left|Jason Li]]
+[[Image:Nish_Head.jpg|thumb|100px|frame|left|Jason Li]]
 <b>Nishchal Bhalla</b> is the founder of Security Compass, an Application Security Consulting and Training company. He has over 13 years industry experience.

@@ Line 25: / Line 25: @@
 == About Instructor ==
-[[Image:Jason_Li.jpg|thumb|100px|frame|left|Jason Li]]
+[[Image:https://www.owasp.org/images/thumb/b/b1/Nish_Head.jpg/450px-Nish_Head.jpg|thumb|100px|frame|left|Jason Li]]
-<b>Jason</b> is a Senior Application Security Engineer at Aspect Security during which time he has performed code reviews, penetration testing and training at a variety of financial, commercial, and government institutions. He is a certified GIAC Secure Software Programmer in Java and before joining Aspect, he was a Java Software Developer and a Java course instructor for Johns Hopkins University. He is currently working on the OWASP UI Verification Project and along with Arshan Dabirsiaghi, he is a core developer of the OWASP AntiSamy Project. Jason received his Post-Master's in Computer Science with a concentration in Information Security from Johns Hopkins University and both his Master's and B.S in Computer Science from Cornell University.
+<b>Nishchal Bhalla</b> is the founder of Security Compass, an Application Security Consulting and Training company. He has over 13 years industry experience.

@@ Line 10: / Line 10: @@
 === Students who take this course will be able to ===
-    * Understand the threat landscape in application security
+*Introduction to concepts of Application Security
-    * Acquire the toolset required for securing and assessing their applications
+*Understand the threat landscape in application security
-    * Learn aspects of Secure SDLC
+*Acquire the toolset required for securing and assessing their applications
-    * Be able to articulate a plan to start an Application Security Program
+*Learn aspects of Secure SDLC
-    * Learn metrics to aid in assessing organization's application security posture
+*Be able to articulate a plan to start an Application Security Program
-    * Be able to confidently promote application security throughout the organization
+*Learn metrics to aid in assessing organization's application security posture
 === Who Should Attend ===

@@ Line 18: / Line 18: @@
 === Who Should Attend ===
-    * CISO's and CSO's
+*CISO's and CSO's
-    * Information security managers
+*Information security managers
-    * Introduction to concepts of Application Security
+*Designated security experts
-    * Designated security experts
+*Anyone with a desire to understand application security
 == About Instructor ==
 [[Image:Jason_Li.jpg|thumb|100px|frame|left|Jason Li]]
 <b>Jason</b> is a Senior Application Security Engineer at Aspect Security during which time he has performed code reviews, penetration testing and training at a variety of financial, commercial, and government institutions. He is a certified GIAC Secure Software Programmer in Java and before joining Aspect, he was a Java Software Developer and a Java course instructor for Johns Hopkins University. He is currently working on the OWASP UI Verification Project and along with Arshan Dabirsiaghi, he is a core developer of the OWASP AntiSamy Project. Jason received his Post-Master's in Computer Science with a concentration in Information Security from Johns Hopkins University and both his Master's and B.S in Computer Science from Cornell University.