OWASP Minneapolis St Paul 2010 Conference - Revision history

Webappsecguy: Adding Midwave and Cigital logos.

2010-09-30T03:38:05Z

Adding Midwave and Cigital logos.

Webappsecguy: Updating professional title for Jason Rouse

2010-09-28T00:52:53Z

Updating professional title for Jason Rouse

Webappsecguy: labeling Cheswick's talk at the top of the page.

2010-09-28T00:39:39Z

labeling Cheswick's talk at the top of the page.

Webappsecguy: Updating topic description for Charles Henderson.

2010-09-28T00:28:58Z

Updating topic description for Charles Henderson.

Webappsecguy: Updating payment language to match Eventbrite.

2010-09-25T21:52:19Z

Updating payment language to match Eventbrite.

Webappsecguy: Rearranging payment verbiage.

2010-09-25T21:47:03Z

Rearranging payment verbiage.

Webappsecguy: Updating verbiage.

2010-09-25T21:45:36Z

Updating verbiage.

Webappsecguy: Adding Bill Cheswick keynote!

2010-09-25T21:43:16Z

Adding Bill Cheswick keynote!

Show changes

Webappsecguy: Slotting speakers to make air travel arrangements work out.

2010-09-23T00:03:13Z

Slotting speakers to make air travel arrangements work out.

Webappsecguy: Updating verbiage.

2010-09-22T02:06:51Z

Updating verbiage.

← Older revision		Revision as of 03:38, 30 September 2010
Line 20:		Line 20:
	Thank you to the following sponsors for their financial support of this event and the OWASP MSP chapter!		Thank you to the following sponsors for their financial support of this event and the OWASP MSP chapter!

−	[[Image:Imperva_Logo.gif\|link=http://www.imperva.com/]]      [[Image:Netspi_logo.png\|120px\|link=http://www.netspi.com/]]      [[Image:AccuvantLogoNEW.jpg\|\|120px\|link=http://www.accuvant.com/]]	+	[[Image:Imperva_Logo.gif\|link=http://www.imperva.com/]]      [[Image:Netspi_logo.png\|120px\|link=http://www.netspi.com/]]      [[Image:AccuvantLogoNEW.jpg\|\|120px\|link=http://www.accuvant.com/]]      [[Image:midwave.gif\|\|140px\|link=http://www.midwave.com/]]      [[Image:Cigital_logo.gif\|160px\|link=https://www.cigital.com/]]

@@ Line 164: / Line 164: @@
 '''Jason Rouse'''
-Principal Consultant, [https://www.cigital.com/ Cigital]
+Principal Consultant and Mobile/Wireless Security Lead, [https://www.cigital.com/ Cigital]
 '''Topic:''' ''Mobile Security''

← Older revision		Revision as of 00:39, 28 September 2010
Line 3:		Line 3:
	Six great speakers, '''only $25'''.		Six great speakers, '''only $25'''.

−	'''We're happy to announce our keynote, [http://www.research.att.com/people/Cheswick_William_R/index.html Bill Cheswick]. Bill is a legendary figure behind the network firewall concept and co-author of ''[http://www.wilyhacker.com/1e/ Firewalls and Internet Security]'', one of the most influential books on the topic. Bill coined the term "proxy" under its current technical meaning and is a creator of the Internet Mapping Project. On October 8 Bill will discuss one of the most fundamental aspects of security: the password.'''	+	'''We're happy to announce our keynote, [http://www.research.att.com/people/Cheswick_William_R/index.html Bill Cheswick]. Bill is a legendary figure behind the network firewall concept and co-author of ''[http://www.wilyhacker.com/1e/ Firewalls and Internet Security]'', one of the most influential books on the topic. Bill coined the term "proxy" under its current technical meaning and is a creator of the Internet Mapping Project. On October 8 Bill will discuss one of the most fundamental aspects of security, the password, in his talk titled "Rethinking Passwords".'''

@@ Line 150: / Line 150: @@
 '''Topic:''' ''Global Security Report''
-Trends in information security and some insights on virtual patches.
+From January 1, 2009 to December 31, 2009, Trustwave's SpiderLabs performed approximately 1,900 penetration tests and over 200 security incident and compromise investigations around the world.
-'''Bio:''' Charles Henderson is the Director of Application Security Services in Trustwave's SpiderLabs. He has been in the information security industry for over fifteen years. His team specializes in application security including application penetration testing, code review, and training in secure
+This presentation will be a summary of the results of the analysis of the data gathered during 2009. The results will be presented in terms of both technical and business impact analysis.
 development techniques. The team's clients range from the largest of the Fortune lists to small and midsized companies interested in improving their application security posture. Charles routinely speaks at various conferences around the world (including past Black Hat, SOURCE, IAFCI, OWASP AppSec USA, OWASP AppSec Europe, and Merchant Risk Council events) on various subject matters relating to application security.
 |-

← Older revision		Revision as of 21:52, 25 September 2010
Line 6:		Line 6:


−	'''See the [[OWASP_Minneapolis_St_Paul_2010_Conference#Agenda \| Agenda]].'''<br><br>[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online only), check, money order, and PO ("Pay by invoice") accepted. ~~Please note that regardless~~ of ~~payment method, advance registration is required~~. We place food orders based on the number of registrants.''	+	'''See the [[OWASP_Minneapolis_St_Paul_2010_Conference#Agenda \| Agenda]].'''<br><br>[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online only), check, money order, and PO ("Pay by invoice") accepted. If paying by check or money order please make it payable to '''OWASP''' on the day of the event. We place food orders based on the number of registrants. '''You must register in advance for this event.''' ''


Line 46:		Line 46:


−	[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online only), check, money order, and PO ("Pay by invoice") accepted. ~~Please note that regardless~~ of ~~payment method, advance registration is required~~. We place food orders based on the number of registrants.''	+	[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online only), check, money order, and PO ("Pay by invoice") accepted. If paying by check or money order please make it payable to '''OWASP''' on the day of the event. We place food orders based on the number of registrants. '''You must register in advance for this event.''' ''

← Older revision		Revision as of 21:47, 25 September 2010
Line 6:		Line 6:


−	'''See the [[OWASP_Minneapolis_St_Paul_2010_Conference#Agenda \| Agenda]].'''<br><br>[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online), check, money order, and "Pay by invoice" ~~(PO~~) accepted. Please note that regardless of payment method, advance registration is required. We place food orders based on the number of registrants.''	+	'''See the [[OWASP_Minneapolis_St_Paul_2010_Conference#Agenda \| Agenda]].'''<br><br>[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online only), check, money order, and PO ("Pay by invoice") accepted. Please note that regardless of payment method, advance registration is required. We place food orders based on the number of registrants.''


Line 46:		Line 46:


−	[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online), check, money order, and "Pay by invoice" ~~(PO~~) accepted. Please note that regardless of payment method, advance registration is required. We place food orders based on the number of registrants.''	+	[[Image:Registerbutton.png\|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online only), check, money order, and PO ("Pay by invoice") accepted. Please note that regardless of payment method, advance registration is required. We place food orders based on the number of registrants.''

← Older revision		Revision as of 21:45, 25 September 2010
Line 1:		Line 1:
	Building on the success of the [[OWASP Minneapolis St Paul 2009 Conference \| 2009]] talks, the [[Minneapolis St Paul \| OWASP Minneapolis-St. Paul (OWASP MSP) chapter]] and [http://www.dc612.org/ DC612 local DEF CON chapter] will be hosting a day of talks on '''Friday, October 8, 2010''' at the [http://www1.umn.edu/twincities/maps/StCen/ St. Paul Student Center] [http://www.spsc.umn.edu/about/directory/second.php North Star Ballroom] on the [http://www1.umn.edu/twincities/index.php University of Minnesota - Twin Cities] campus.		Building on the success of the [[OWASP Minneapolis St Paul 2009 Conference \| 2009]] talks, the [[Minneapolis St Paul \| OWASP Minneapolis-St. Paul (OWASP MSP) chapter]] and [http://www.dc612.org/ DC612 local DEF CON chapter] will be hosting a day of talks on '''Friday, October 8, 2010''' at the [http://www1.umn.edu/twincities/maps/StCen/ St. Paul Student Center] [http://www.spsc.umn.edu/about/directory/second.php North Star Ballroom] on the [http://www1.umn.edu/twincities/index.php University of Minnesota - Twin Cities] campus.

−	'''~~UPDATE SEP-~~25: We're happy to announce our keynote, [http://www.research.att.com/people/Cheswick_William_R/index.html Bill Cheswick]. Bill is a legendary figure behind the network firewall concept and co-author of ''[http://www.wilyhacker.com/1e/ Firewalls and Internet Security]'', one of the most influential books on the topic. Bill coined the term "proxy" under its current technical meaning and is a creator of the Internet Mapping Project. On October 8 Bill will discuss one of the most fundamental aspects of security: the password.'''	+	Six great speakers, '''only $25'''.
		+
		+	'''We're happy to announce our keynote, [http://www.research.att.com/people/Cheswick_William_R/index.html Bill Cheswick]. Bill is a legendary figure behind the network firewall concept and co-author of ''[http://www.wilyhacker.com/1e/ Firewalls and Internet Security]'', one of the most influential books on the topic. Bill coined the term "proxy" under its current technical meaning and is a creator of the Internet Mapping Project. On October 8 Bill will discuss one of the most fundamental aspects of security: the password.'''

@@ Line 126: / Line 126: @@
 | style="padding: 5px; background-color: rgb(174, 183, 213);" | 1:30 PM - 2:20 PM
 | style="border: 1px solid rgb(174, 183, 213); padding: 5px;" |
-'''Jason Rouse'''
+'''Charles Henderson'''
-Principal Consultant, [https://www.cigital.com/ Cigital]
+Director of Application Security Services, [https://www.trustwave.com/spiderLabs.php Trustwave's SpiderLabs]
-'''Topic:''' Mobile Security
+'''Topic:''' TBA
-Mobile applications enable millions of users to be more productive, have more fun, and interact with their world in more ways than ever before. We're approaching mobile applications with many of the same tried-and-true approaches that we've used in more traditional software, but what are the dangers? Mobile architectures run the gamut from simple web-based applications optimized for mobile displays to custom-built handset-specific applications that can interact directly with the mobile operating system. This talk will explore the hybrid mobile/web application approach, and discuss the threads binding it together - information protection and convergence. Mobile devices are unique in that they offer one of the most potentially hostile environments imaginable - privacy, compliance, and capture protection top the charts as the three most difficult issues facing mobile applications and those who use them. This talk will dive into specifics on what are today "mobile-only" threats; that is, those issues such as location-based services or text messages, and discover how they can be compromised, and how security practitioners can protect them and the back-end applications that service them.
+'''Bio:''' Charles Henderson is the Director of Application Security Services in Trustwave's SpiderLabs. He has been in the information security industry for over fifteen years. His team specializes in application security including application penetration testing, code review, and training in secure
+development techniques. The team's clients range from the largest of the Fortune lists to small and midsized companies interested in improving their application security posture. Charles routinely speaks at various conferences around the world (including past Black Hat, SOURCE, IAFCI, OWASP AppSec USA, OWASP AppSec Europe, and Merchant Risk Council events) on various subject matters relating to application security.
 |-
@@ Line 142: / Line 141: @@
 | style="padding: 5px; background-color: rgb(174, 183, 213);" | 2:30 PM - 3:20 PM
 | style="border: 1px solid rgb(174, 183, 213); padding: 5px;" |
-''' '''
+'''Jason Rouse'''
-'''Topic:''' TBA
+Mobile applications enable millions of users to be more productive, have more fun, and interact with their world in more ways than ever before. We're approaching mobile applications with many of the same tried-and-true approaches that we've used in more traditional software, but what are the dangers? Mobile architectures run the gamut from simple web-based applications optimized for mobile displays to custom-built handset-specific applications that can interact directly with the mobile operating system. This talk will explore the hybrid mobile/web application approach, and discuss the threads binding it together - information protection and convergence. Mobile devices are unique in that they offer one of the most potentially hostile environments imaginable - privacy, compliance, and capture protection top the charts as the three most difficult issues facing mobile applications and those who use them. This talk will dive into specifics on what are today "mobile-only" threats; that is, those issues such as location-based services or text messages, and discover how they can be compromised, and how security practitioners can protect them and the back-end applications that service them.
 |-
@@ Line 155: / Line 158: @@
 | style="padding: 5px; background-color: rgb(174, 183, 213);" | 3:30 PM - 4:30 PM
 | style="border: 1px solid rgb(174, 183, 213); padding: 5px;" |
-'''Charles Henderson'''
+'''Speaker:''' TBA
 '''Topic:''' TBA
-'''Bio:''' Charles Henderson is the Director of Application Security Services in Trustwave's SpiderLabs. He has been in the information security industry for over fifteen years. His team specializes in application security including application penetration testing, code review, and training in secure
+'''Bio:''' TBA
 |-

@@ Line 2: / Line 2: @@
-'''See the [[OWASP_Minneapolis_St_Paul_2010_Conference#Agenda | Agenda]].'''<br><br>[[Image:Registerbutton.png|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online), check, money order, and "Pay by invoice" (PO) accepted. We place food orders based on the number of registrants.''
+'''See the [[OWASP_Minneapolis_St_Paul_2010_Conference#Agenda | Agenda]].'''<br><br>[[Image:Registerbutton.png|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online), check, money order, and "Pay by invoice" (PO) accepted. Please note that regardless of payment method, advance registration is required. We place food orders based on the number of registrants.''
@@ Line 42: / Line 42: @@
-[[Image:Registerbutton.png|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online), check, money order, and "Pay by invoice" (PO) accepted. We place food orders based on the number of registrants.''
+[[Image:Registerbutton.png|link=http://dayofsecuritytalks2010.eventbrite.com]]<br><br>''To cover the cost of food and beverages, a payment of $25 per attendee is requested for the day of talks. Credit card (online), check, money order, and "Pay by invoice" (PO) accepted. Please note that regardless of payment method, advance registration is required. We place food orders based on the number of registrants.''
@@ Line 144: / Line 144: @@
 ''' '''
-'''Topic:'''
+'''Topic:''' TBA
-'''Bio:'''
+'''Bio:''' TBA
 |-