This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "AppSec Washington 2005/Agenda"

From OWASP
Jump to: navigation, search
(→‎OWASP DC 2005 Conference Schedule)
(→‎OWASP DC 2005 Conference Schedule)
Line 3: Line 3:
 
{| style="width:95%" border="0" align="center"
 
{| style="width:95%" border="0" align="center"
 
  | align="center" style="background:#4058A0; color:white" | Day 1 - October 11, 2005
 
  | align="center" style="background:#4058A0; color:white" | Day 1 - October 11, 2005
−
  |
+
  |  
 
|}
 
|}
 +
 +
<html xmlns:v="urn:schemas-microsoft-com:vml"
 +
xmlns:o="urn:schemas-microsoft-com:office:office"
 +
xmlns:w="urn:schemas-microsoft-com:office:word"
 +
xmlns="http://www.w3.org/TR/REC-html40">
 +
 +
<head>
 +
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
 +
<meta name=ProgId content=Word.Document>
 +
<meta name=Generator content="Microsoft Word 11">
 +
<meta name=Originator content="Microsoft Word 11">
 +
<link rel=File-List href="Day%201_files/filelist.xml">
 +
<!--[if gte mso 9]><xml>
 +
<o:DocumentProperties>
 +
  <o:Author>esheridan</o:Author>
 +
  <o:LastAuthor>esheridan</o:LastAuthor>
 +
  <o:Revision>1</o:Revision>
 +
  <o:TotalTime>0</o:TotalTime>
 +
  <o:Created>2006-05-30T13:47:00Z</o:Created>
 +
  <o:LastSaved>2006-05-30T13:47:00Z</o:LastSaved>
 +
  <o:Pages>1</o:Pages>
 +
  <o:Words>994</o:Words>
 +
  <o:Characters>5667</o:Characters>
 +
  <o:Company>Aspect Security</o:Company>
 +
  <o:Lines>47</o:Lines>
 +
  <o:Paragraphs>13</o:Paragraphs>
 +
  <o:CharactersWithSpaces>6648</o:CharactersWithSpaces>
 +
  <o:Version>11.5606</o:Version>
 +
</o:DocumentProperties>
 +
</xml><![endif]--><!--[if gte mso 9]><xml>
 +
<w:WordDocument>
 +
  <w:ValidateAgainstSchemas/>
 +
  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
 +
  <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
 +
  <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
 +
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 +
</w:WordDocument>
 +
</xml><![endif]--><!--[if gte mso 9]><xml>
 +
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
 +
</w:LatentStyles>
 +
</xml><![endif]-->
 +
<style>
 +
<!--
 +
/* Style Definitions */
 +
p.MsoNormal, li.MsoNormal, div.MsoNormal
 +
{mso-style-parent:"";
 +
margin:0in;
 +
margin-bottom:.0001pt;
 +
mso-pagination:widow-orphan;
 +
font-size:12.0pt;
 +
font-family:"Times New Roman";
 +
mso-fareast-font-family:"Times New Roman";}
 +
h1
 +
{mso-margin-top-alt:auto;
 +
margin-right:0in;
 +
mso-margin-bottom-alt:auto;
 +
margin-left:0in;
 +
mso-pagination:widow-orphan;
 +
mso-outline-level:1;
 +
font-size:24.0pt;
 +
font-family:"Times New Roman";}
 +
@page Section1
 +
{size:8.5in 11.0in;
 +
margin:1.0in 1.25in 1.0in 1.25in;
 +
mso-header-margin:.5in;
 +
mso-footer-margin:.5in;
 +
mso-paper-source:0;}
 +
div.Section1
 +
{page:Section1;}
 +
-->
 +
</style>
 +
<!--[if gte mso 10]>
 +
<style>
 +
/* Style Definitions */
 +
table.MsoNormalTable
 +
{mso-style-name:"Table Normal";
 +
mso-tstyle-rowband-size:0;
 +
mso-tstyle-colband-size:0;
 +
mso-style-noshow:yes;
 +
mso-style-parent:"";
 +
mso-padding-alt:0in 5.4pt 0in 5.4pt;
 +
mso-para-margin:0in;
 +
mso-para-margin-bottom:.0001pt;
 +
mso-pagination:widow-orphan;
 +
font-size:10.0pt;
 +
font-family:"Times New Roman";
 +
mso-ansi-language:#0400;
 +
mso-fareast-language:#0400;
 +
mso-bidi-language:#0400;}
 +
</style>
 +
<![endif]--><!--[if gte mso 9]><xml>
 +
<o:shapedefaults v:ext="edit" spidmax="2050"/>
 +
</xml><![endif]--><!--[if gte mso 9]><xml>
 +
<o:shapelayout v:ext="edit">
 +
  <o:idmap v:ext="edit" data="1"/>
 +
</o:shapelayout></xml><![endif]-->
 +
</head>
 +
 +
<body lang=EN-US link=blue vlink=blue style='tab-interval:.5in'>
 +
 +
<div class=Section1>
 +
 +
<div align=center>
 +
 +
<table class=MsoNormalTable border=0 cellpadding=0 width=700 style='width:525.0pt;
 +
mso-cellspacing:1.5pt'>
 +
<tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'>
 +
  <td colspan=3 style='background:#4058A0;padding:.75pt .75pt .75pt .75pt'>
 +
  <h1 align=center style='text-align:center'><span style='color:white'><br>
 +
  Day 1 - October 11, 2005</span></h1>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:1'>
 +
  <td width="10%" style='width:10.0%;background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal><o:p>&nbsp;</o:p></p>
 +
  </td>
 +
  <td width="40%" style='width:40.0%;background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>Track 1: Red
 +
  Auditorium</p>
 +
  </td>
 +
  <td width="40%" style='width:40.0%;background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>Track 2: Green
 +
  Auditorium</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:2'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>08:00 - 09:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Registration and Coffee </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:3'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>09:00 - 09:10 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#F2F2F2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Introduction: Dave Wichers, OWASP Conferences Chair &amp;
 +
  COO Aspect Security (<a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_Intro_DaveWichers_Key_JoeJarzombek_RonRoss.mp4">video</a>)
 +
  </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:4'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>09:10 - 10:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#F2F2F2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Keynote: Joe Jarzombek - Dir. of Software Assurance - DHS
 +
  - Software Assurance: Considerations for Advancing a National Strategy to
 +
  Secure Cyberspace (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Joe_Jarzombek-DHS_SwA_Program_Overview.ppt">ppt</a>
 +
  / Video) </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:5'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>10:00 - 11:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#F2F2F2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Ron Ross - FISMA Project Lead - NIST - Status of the
 +
  Federal Information Security Management Act (FISMA) Project (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Ron_Ross-FISMA.ppt">ppt</a>
 +
  / video) </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:6'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>11:00 - 11:20 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Break </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:7'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>11:20 - 12:30 </p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Jack Danahy - CEO Ounce Labs - The Business Case for
 +
  Software Security Assurance (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Jack_Danahy-Business_Case_for_Application_Security.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_JackDanahy_The_Business_Case_for_Software_Security_Assurance.mp4">video</a>)
 +
  </p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Arian Evans - FishNet Security - The OWASP Tools Survey
 +
  Project (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Arian_Evans_Tools-Taxonomy.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_ArianEvans_Tools_SurveyProject.mp4">video</a>)
 +
  </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:8'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>12:30 - 13:45 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Lunch</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:9'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>13:45 - 15:00 </p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Alex Stamos - iSEC Partners - Web Services Project (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Alex_Smolen-OWASP_WebServices_Project.ppt">ppt</a>)
 +
  - Attacking Web Services: The Next Generation of Vulnerable Enterprise Apps (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Alex_Stamos-Attacking_Web_Services.ppt">ppt</a>)
 +
  (video both) </p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Paul Black - NIST - The Software Assurance Metrics and
 +
  Tool Evaluation (SAMATE) Project (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Paul_Black-SAMATE_Project.ppt">ppt</a>)
 +
  <br>
 +
  Michael Kass - NIST - A Taxonomy of Software Assurance Tools and the Security
 +
  Bugs They Catch (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Mike_Kass-Tools_Taxonomy.ppt">ppt</a>)
 +
  (video both) </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:10'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>15:00 - 15:20 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Break</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:11'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>15:20 - 16:40</p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Diniz Cruz - OWASP .NET Project Lead - Rooting the CLR (<a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_DinizCruz_Rooting_the_CLR.mp4">video</a>)
 +
  </p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Paul Black - NIST - Developing a Reference Dataset (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Paul_Black-Reference_Dataset.ppt">ppt</a>)
 +
  <br>
 +
  Rick Kuhn - NIST - Software Fault Interactions (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Rick_Kuhn-Software_Fault_Interactions.ppt">ppt</a>)
 +
  (<a href="http://www.aspectsecurity.com/owasp/OWASP_PaulBlack_RickKuhn.mp4">video
 +
  both</a>) </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:12'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>16:40 - 17:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Break </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:13'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>17:00 - 18:00 </p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Alex Smolen - Parasoft - Application Logic Defense (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1AppSec2005DC-Alex_Smolen-Application_Logic-Attacks_Defense.ppt">ppt</a>
 +
  / video) </p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Daniel Cuthbert - OWASP Testing Project Lead - The
 +
  Evolution of Web Application Penetration Testing (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Dan_Cuthbert-Evolution_of_App_Pen_Testing.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_DanielCutbert_Evolution_WebAppPenTest.mp4">video</a>)
 +
  </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:14'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>18:00 - 19:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Bus to Dinner Event at Holiday Inn</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:15'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>19:00 - 21:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Dinner Event (Optional) at Holiday Inn</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:16'>
 +
  <td colspan=3 style='background:#4058A0;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'><o:p>&nbsp;</o:p></p>
 +
  <h1 align=center style='text-align:center'><span style='color:white'>Day 2 -
 +
  October 12, 2005</span></h1>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:17'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal><o:p>&nbsp;</o:p></p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>Track 1: Red
 +
  Auditorium</p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>Track 2: Green
 +
  Auditorium</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:18'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>08:00 - 09:00 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Coffee</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:19'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>09:00 - 09:50 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#F2F2F2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Keynote Day 2: Ira Winkler - Secrets of Superspies (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Ira_Winkler-Secrets_of_Superspies.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_IraWinkler_Secrets_and_Superspies.mp4">video</a>)</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:20'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>09:50 - 10:50 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#F2F2F2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Jeremy Poteet - AppDefense - In the Line of Fire:
 +
  Defending Highly Visible Targets (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Jeremy_Poteet-In_the_Line_of_Fire.ppt">ppt</a>
 +
  / video)</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:21'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>10:50 - 11:10 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Break </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:22'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>11:10 - 12:30</p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Jeff Williams - OWASP Chair &amp; CEO Aspect Security -
 +
  The OWASP Guide Project v2 (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Jeff_Williams-OWASP_AppSec_Guide_2.0.ppt">ppt</a>)
 +
  and OWASP Membership Plan (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Jeff_Williams-OWASP_Membership.ppt">ppt</a>)
 +
  (video both)</p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Danny Allan - Watchfire - Identity Theft, Pfishing, and
 +
  Pharming: Accountability and Responsibilities (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Danny_Allan-Identity_Theft_Phishing_and_Pharming.ppt">ppt</a>)</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:23'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>12:30 - 13:45 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Lunch</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:24'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>13:45 - 15:00 </p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Dinis Cruz - OWASP .NET Project Lead - OWASP .Net Tools
 +
  Project</p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Matt Fisher - SPI Dynamics - Worms Now Targeting Web
 +
  Applications (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Matt_Fisher-Google_Hacking_and_Worms.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/dcVideos/OWASP_MattFisher_WormsNowTargetingWebApps.mp4">video</a>)</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:25'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>15:00 - 15:20 </p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Break</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:26'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>15:20 - 16:30 </p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Tony Canike - The Vanguard Group - Establishing an
 +
  Enterprise-Wide Application Security Program (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Anthony_Canike-Enterprise_AppSec_Program.ppt">ppt</a>
 +
  / video)</p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Rogan Dawes - OWASP WebScarab Project Lead - Advanced
 +
  Features of WebScarab (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Rogan_Dawes-WebScarab.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_RoganDawes_AdvancedFeaturesofWebScarab.mp4">video</a>)</p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:27'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>16:30 - 16:50</p>
 +
  </td>
 +
  <td colspan=2 style='background:#C2C2C2;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Break </p>
 +
  </td>
 +
</tr>
 +
<tr style='mso-yfti-irow:28;mso-yfti-lastrow:yes'>
 +
  <td style='background:#7B8ABD;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal align=center style='text-align:center'>16:50 - 17:50 </p>
 +
  </td>
 +
  <td style='background:#BC857A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>John Steven - Cigital - Building a Scalable Software
 +
  Security Practice within your Organization </p>
 +
  </td>
 +
  <td style='background:#BCA57A;padding:.75pt .75pt .75pt .75pt'>
 +
  <p class=MsoNormal>Gunnar Peterson - Arctec Group - Integrating Identity
 +
  Services into Web Applications (<a
 +
  href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Gunnar_Peterson-Identity-Services-in-WebApps.ppt">ppt</a>
 +
  / <a
 +
  href="http://www.aspectsecurity.com/owasp/OWASP_GunnerPeterson_IntegratingIdentityServicesintoWebApps.mp4">video</a>)</p>
 +
  </td>
 +
</tr>
 +
</table>
 +
 +
</div>
 +
 +
<p class=MsoNormal><o:p>&nbsp;</o:p></p>
 +
 +
</div>
 +
 +
</body>
 +
 +
</html>

Revision as of 10:57, 30 May 2006

OWASP DC 2005 Conference Schedule

Day 1 - October 11, 2005

<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">

<head> <meta http-equiv=Content-Type content="text/html; charset=us-ascii"> <meta name=ProgId content=Word.Document> <meta name=Generator content="Microsoft Word 11"> <meta name=Originator content="Microsoft Word 11"> <link rel=File-List href="Day%201_files/filelist.xml"> <style> </style> </head>

<body lang=EN-US link=blue vlink=blue style='tab-interval:.5in'>


Day 1 - October 11, 2005

<o:p> </o:p>

Track 1: Red Auditorium

Track 2: Green Auditorium

08:00 - 09:00

Registration and Coffee

09:00 - 09:10

Introduction: Dave Wichers, OWASP Conferences Chair & COO Aspect Security (<a href="http://www.aspectsecurity.com/owasp/OWASP_Intro_DaveWichers_Key_JoeJarzombek_RonRoss.mp4">video</a>)

09:10 - 10:00

Keynote: Joe Jarzombek - Dir. of Software Assurance - DHS - Software Assurance: Considerations for Advancing a National Strategy to Secure Cyberspace (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Joe_Jarzombek-DHS_SwA_Program_Overview.ppt">ppt</a> / Video)

10:00 - 11:00

Ron Ross - FISMA Project Lead - NIST - Status of the Federal Information Security Management Act (FISMA) Project (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Ron_Ross-FISMA.ppt">ppt</a> / video)

11:00 - 11:20

Break

11:20 - 12:30

Jack Danahy - CEO Ounce Labs - The Business Case for Software Security Assurance (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Jack_Danahy-Business_Case_for_Application_Security.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/OWASP_JackDanahy_The_Business_Case_for_Software_Security_Assurance.mp4">video</a>)

Arian Evans - FishNet Security - The OWASP Tools Survey Project (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Arian_Evans_Tools-Taxonomy.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/OWASP_ArianEvans_Tools_SurveyProject.mp4">video</a>)

12:30 - 13:45

Lunch

13:45 - 15:00

Alex Stamos - iSEC Partners - Web Services Project (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Alex_Smolen-OWASP_WebServices_Project.ppt">ppt</a>) - Attacking Web Services: The Next Generation of Vulnerable Enterprise Apps (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1/AppSec2005DC-Alex_Stamos-Attacking_Web_Services.ppt">ppt</a>) (video both)

Paul Black - NIST - The Software Assurance Metrics and Tool Evaluation (SAMATE) Project (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Paul_Black-SAMATE_Project.ppt">ppt</a>)
Michael Kass - NIST - A Taxonomy of Software Assurance Tools and the Security Bugs They Catch (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Mike_Kass-Tools_Taxonomy.ppt">ppt</a>) (video both)

15:00 - 15:20

Break

15:20 - 16:40

Diniz Cruz - OWASP .NET Project Lead - Rooting the CLR (<a href="http://www.aspectsecurity.com/owasp/OWASP_DinizCruz_Rooting_the_CLR.mp4">video</a>)

Paul Black - NIST - Developing a Reference Dataset (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Paul_Black-Reference_Dataset.ppt">ppt</a>)
Rick Kuhn - NIST - Software Fault Interactions (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Rick_Kuhn-Software_Fault_Interactions.ppt">ppt</a>) (<a href="http://www.aspectsecurity.com/owasp/OWASP_PaulBlack_RickKuhn.mp4">video both</a>)

16:40 - 17:00

Break

17:00 - 18:00

Alex Smolen - Parasoft - Application Logic Defense (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day1AppSec2005DC-Alex_Smolen-Application_Logic-Attacks_Defense.ppt">ppt</a> / video)

Daniel Cuthbert - OWASP Testing Project Lead - The Evolution of Web Application Penetration Testing (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day1/AppSec2005DC-Dan_Cuthbert-Evolution_of_App_Pen_Testing.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/OWASP_DanielCutbert_Evolution_WebAppPenTest.mp4">video</a>)

18:00 - 19:00

Bus to Dinner Event at Holiday Inn

19:00 - 21:00

Dinner Event (Optional) at Holiday Inn

<o:p> </o:p>

Day 2 - October 12, 2005

<o:p> </o:p>

Track 1: Red Auditorium

Track 2: Green Auditorium

08:00 - 09:00

Coffee

09:00 - 09:50

Keynote Day 2: Ira Winkler - Secrets of Superspies (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Ira_Winkler-Secrets_of_Superspies.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/OWASP_IraWinkler_Secrets_and_Superspies.mp4">video</a>)

09:50 - 10:50

Jeremy Poteet - AppDefense - In the Line of Fire: Defending Highly Visible Targets (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Jeremy_Poteet-In_the_Line_of_Fire.ppt">ppt</a> / video)

10:50 - 11:10

Break

11:10 - 12:30

Jeff Williams - OWASP Chair & CEO Aspect Security - The OWASP Guide Project v2 (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Jeff_Williams-OWASP_AppSec_Guide_2.0.ppt">ppt</a>) and OWASP Membership Plan (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Jeff_Williams-OWASP_Membership.ppt">ppt</a>) (video both)

Danny Allan - Watchfire - Identity Theft, Pfishing, and Pharming: Accountability and Responsibilities (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Danny_Allan-Identity_Theft_Phishing_and_Pharming.ppt">ppt</a>)

12:30 - 13:45

Lunch

13:45 - 15:00

Dinis Cruz - OWASP .NET Project Lead - OWASP .Net Tools Project

Matt Fisher - SPI Dynamics - Worms Now Targeting Web Applications (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Matt_Fisher-Google_Hacking_and_Worms.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/dcVideos/OWASP_MattFisher_WormsNowTargetingWebApps.mp4">video</a>)

15:00 - 15:20

Break

15:20 - 16:30

Tony Canike - The Vanguard Group - Establishing an Enterprise-Wide Application Security Program (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_1-Day2/AppSec2005DC-Anthony_Canike-Enterprise_AppSec_Program.ppt">ppt</a> / video)

Rogan Dawes - OWASP WebScarab Project Lead - Advanced Features of WebScarab (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Rogan_Dawes-WebScarab.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/OWASP_RoganDawes_AdvancedFeaturesofWebScarab.mp4">video</a>)

16:30 - 16:50

Break

16:50 - 17:50

John Steven - Cigital - Building a Scalable Software Security Practice within your Organization

Gunnar Peterson - Arctec Group - Integrating Identity Services into Web Applications (<a href="../../../../../../../docroot/owasp/misc/OWASP_DC_2005_Presentations/Track_2-Day2/AppSec2005DC-Gunnar_Peterson-Identity-Services-in-WebApps.ppt">ppt</a> / <a href="http://www.aspectsecurity.com/owasp/OWASP_GunnerPeterson_IntegratingIdentityServicesintoWebApps.mp4">video</a>)

<o:p> </o:p>

</body>

</html>

Retrieved from "https://wiki.owasp.org/index.php?title=AppSec_Washington_2005/Agenda&oldid=4422"