Difference between revisions of "OWASP Day Mexico 2010"

Latest revision as of 02:41, 17 June 2010

Welcome

OWASP Day Mexico 2010

Application Security Role in cybercrime at Mexico and Latin America

This is the only event in Mexico specialized in Application Security. Although infrastructure in Mexico is well developed (see CIA Facts) Mexico's reality about application security still need to be thoroughly steered.

In this even you will meet the tools (both open source and commercial), standards, guidelines and recent news about the industry in USA and the world all these relevant to:

Chief Information Officers, Chief Information Security Officers, Chief Technology Officers, Deputies, Associates and Staff
Chief Financial Officers, Auditors, and Staff Responsible for IT Security Oversight and Compliance
Security Managers and Staff
Application Developers
Application Testers and Quality Assurance
Application Project Management and Staff
Executives, Managers, and Staff Responsible for IT Security Governance
IT Professionals Interesting in Improving IT Security

Acknowledgment

The coordination team want to express it's sincerest thanks to ITESM Aguascalientes University for all their support to the realization of this event. Without Emmanuel's and other helpful people at the University would have been much harder to organize the event with the level of quality we are offering

Meet Aguascalientes

Check out the host city

Coordinating team

Juan Carlos Calderon Rojas	Coordination	[email protected]
Albertina "Betty" Cardiel	Coordination and Enterprise Linking	[email protected]
Emmanuel Lara	Logistics and Enterprise Linking	[email protected]
Armando Melendez	Marketing and Promotion	[email protected]
Kate Harmann	OWASP Operations Director	[email protected]

Feel free to contact us for more information on the event or if you want to schedule an informative session with your organization

Registration

Registration is Closed

Thanks to all the people who attended to the event, it was a great experience for us

General Public	400 MX pesos (35 USD)
OWASP Members	200 MX pesos (18 USD)
Students	200 MX pesos (18 USD)

Important: For student discount, attendees must present proof of enrollment when picking up your badge.

Why so cheap, This is a region level event with international speakers?

OWASP is a non-profit organization and we are just covering costs
We are looking for Sponsors that help us bring great speakers to you
We want to promote application security in Mexican companies and attract as much IT professionals, SOHO owners, Small, Medium and Large companies owners as possible, so we expect to have 3 or 5 professionals of one company instead of just one.

Also consider attending one of great training sessions.

Agenda

Conference Program - June 4th, 2010
Training sessions will be held on June 3rd.

08:30 - 09:00	Reception Desk Open
09:00 - 10:00	Opening Ceremony Emmanuel Lara Director of Info Tec Career at ITESM Aguascalientes (BIO) and Special Invites from Government.
10:00 - 10:45	Keynote conference: About OWASP and its potential contribution in Mexico Tom Brennan OWASP Board Member (BIO) Juan Carlos Calderon Information Security Research Leader at Softtek (BIO)
10:45 - 11:00	Coffee Break
11:00 - 12:00	Statistics and Trends of cybercrime in Mexico Ing. Fausto Estrella General coordinator of Technologic crime attention unit at Jalisco state CiberPolice
12:00 - 13:00	Open Software Assurance Maturity Model (Open SAMM) Pravir Chandra Director of Strategic Services at Fortify USA (BIO)
13:00 - 14:00	Lunch
14:00 - 15:00	Information Privacy as a Business Risk in Mexico (Under the new Mexican data protection Law perspective) Victor Chapella CEO at Sm4rt Security Services, OWASP Mexico City Chapter Leader (BIO)
15:00 - 16:00	Which Programming Language is More Secure? Tom Brennan OWASP Board Member (BIO)
16:00 - 16:15	Coffee Break
16:15 - 17:15	WAFs, a step in the wrong direction? Eduardo Vela Nava Security Researcher at Google Mexico
17:15 - 18:15	Panel: Next Steps to fight cybercrime in Mexico Moderator: Betty Cardiel Founder, CISO at PROSEG Information Security (BIO)
18:15 - 19:00	Wrap-up and Announcement

21:00 - .. : ..	Social Event at Ahma

After the event enjoy a free entrance and free shot at Ahma pub on OWASP Day Coordiation Team, remember to bring your badge!!!

Training

Application Security Essentials (2500 MX pesos - 210 USD)

Rigoberto Juarez (ITESM) / Ruben Ventura (SME at Proseg)
- Learn about the most common vulnerabilities in applications, about how to exploit them, penetrate into systems and also how to avoid them. This is the minimal knowledge to every IT professional, given that 80% of the exploited vulnerabilities by hackers today are into the applications. - Schedule: 11:00 - 19:00

Workshop - Developing Hacking skill with real world examples (2500 MX pesos - 210 USD)

Hector Espinoza (Ethical Hacker at Softtek)
- Learn basic techniques to exploit buffer overflows, remote OS command execution, reverse engineering and DB intrusion by solving hacker challenges posted in hacking challenges sites. With the 5 year application security expert Hector Espinoza.
- Schedule: 11:00 - 15:00
IMPORTANT: Laptop is required to solve the exercises.

Securing Web Applications with Layer7/Aplication Firewalls (2500 MX pesos - 210 USD)

Luis Martinez Bacha (Software Security Program Leader at Softtek)
- Learn how to use layer 7 (Application) software/devices to quickly protect your critical systems. Save time by not modifying major modification in application source code and protect systmes immediatelly to avoid vulnerabilities in third party products while definitive patches are available.
- Schedule: 15:00 - 19:00

After the course enjoy a free entrance and free shot at Ahma pub on OWASP Day Coordiation Team, remember to bring your badge!!!

If you would like to have an specific training session not listed here please contact us, we can negotiate and find an appropriate trainer

Venue

Instituto Tecnologico de Estudios Superiores de Monterrey (ITESM) campus AGS

OWASP Day Mexico 2010 will be taking place at the Tecnologico de Monterrey (ITESM) University at Aguascalientes, Mexico.

Tecnológico de Monterrey is a multi-campus university system with academic centers in different regions of the country.

The prestige that Tecnológico de Monterrey attained from the start, not only for its academic standards but also for the culture of entrepreneurship, hard work, efficiency and responsibility it seeks to instill in its students, has motivated alumni from different regions of the country to promote the establishment of Tecnológico de Monterrey campuses in their home cities.

This has given Tecnológico de Monterrey a perception of the different needs of each region and the capacity to prepare professionals who can meet them, without leaving their local environment. In addition, since Tecnológico de Monterrey is a nation-wide system, it has accepted the responsibility to respond to the important challenges facing the country.

Many Tecnológico de Monterrey alumni are directors of successful companies in Mexico and Latin America. There are also more and more graduates in important positions in government and public administration

Hotel

We have negotiated discounted rates with 3 hotels at Aguascalientes (click on the images to see detailed hotel information)

One Aguascalientes San Marcos Hotel	Marriot Aguascalientes	Fiesta Americana Aguascalientes

Discount Rate/Night : 500 MXN (~45 USD) (includes breakfast)	Discount Rate/Night : 1100 MXN (~95 USD)	Discount Rate/Night : 1027 MXN (~90 USD)

Important: you have to mention you are attending the OWASP Day Mexico Event at Tecnologico de Monterrey when booking to get the discounted rate

Diamond Sponsor

Platinum Sponsors

Gold Sponsors

Silver Sponsors

Bronze Sponsors

We are still soliciting sponsors for OWASP Mexico Day Conference, slots are going fast so contact us to sponsor today!. Check the benefits

Travel

Traveling to Aguascalientes Mexico

Aguascalientes has Lic Jesus Teran International Airport with direct flights to Mexico City, Houston International and Dallas Fort Worth.

City Location

Aguascalientes, is located in in the heart of Mexico, 5 hours (by car) at north from Mexico City and 2 hours from Guadalajara City.

ITESM University Location

Is located in the north-west side of the city

@@ Line 1: / Line 1: @@
 __NOTOC__
-[[OWASP_Day_Mexico_2010/es | Vea esta página en Español]]
+[[OWASP_Day_Mexico_2010/es | '''Vea esta página en Español''']]
 [[Image:ODM Banner.jpg|OWASP Day Mexico 2010]]
@@ Line 14: / Line 14: @@
 | style="width: 65%; color: rgb(0, 0, 0);" |
 == OWASP Day Mexico 2010<br> ==
-'''[http://www.owaspdaymexico.com/registro.aspx Registration is Open]'''<br>
 {|
 |- valign=top
 | width=65% |
 === Application Security Role in cybercrime at Mexico and Latin America<br> ===
 This is the only event in Mexico specialized in Application Security. Although infrastructure in Mexico is well developed (see [https://www.cia.gov/library/publications/the-world-factbook/geos/mx.html CIA Facts]) Mexico's reality about application security still need to be thoroughly steered.<br>
@@ Line 44: / Line 42: @@
 Use the '''[http://search.twitter.com/search?q=%23OWASPDayMexico #OWASPDayMexico]''' hashtag for your tweets (What are [http://hashtags.org/ hashtags]?)
 '''@OWASPDayMexico Twitter Feed  ([http://www.twitter.com/OWASPDayMexico follow us on Twitter!])'''
-<twitter>125847195</twitter>
+<!-- <twitter>125847195</twitter> -->
 | style="width: 100%; font-size: 95%; color: rgb(0, 0, 0);" |
 |}
@@ Line 100: / Line 98: @@
 ==== Registration  ====
-== Registration is Open ==
+== Registration is Closed ==
-'''You can register to the event [http://www.owaspdaymexico.com/registro.aspx here] (in Spanish), This link is only for people in Mexico, if you want to register from abroad send your contact information to [mailto:[email protected] Kate Hartmann] by email, she will give you details on how to deposit to OWASP Foundation Paypal account'''<br>
+'''Thanks to all the people who attended to the event, it was a great experience for us'''<br>
-{|
+{| align="center" width="300"
 |-
-| General Public
+| ''General Public''
 | 400 MX pesos (35 USD)
 |-
-| OWASP Members
+| ''OWASP Members''
 | 200 MX pesos (18 USD)
 |-
-| Students
+| ''Students''
 | 200 MX pesos (18 USD)
 |}
@@ Line 134: / Line 132: @@
 | bgcolor="#8595c2" align="CENTER" | '''Reception Desk Open'''
 |-
-| height="17" width="14%" align="right" | 09:00 - 9:20
+| height="17" width="14%" align="right" | 09:00 - 10:00
-| bgcolor="#eeeeee" align="CENTER" | Opening Ceremony <br>'''Emmanuel Lara'''  ''Director of Info Tec Career at ITESM Aguascalientes ([http://www.linkedin.com/profile?viewProfile=&key=6951611&authToken=7Rh8&authType=NAME_SEARCH&locale=en_US&srchindex=1&pvs=ps&goback=.fps_emmanuel+lara BIO])''
+| bgcolor="#eeeeee" align="CENTER" | Opening Ceremony <br>'''Emmanuel Lara'''  ''Director of Info Tec Career at ITESM Aguascalientes ([http://www.linkedin.com/profile?viewProfile=&key=6951611&authToken=7Rh8&authType=NAME_SEARCH&locale=en_US&srchindex=1&pvs=ps&goback=.fps_emmanuel+lara BIO])'' and Special Invites from Government.
 |-
-| height="49" width="14%" align="right" | 9:20 - 9:45
+| height="49" width="14%" align="right" | 10:00 - 10:45
-| bgcolor="#b9c2dc" align="CENTER" | What is OWASP Day? <br>''' Juan Carlos Calderon'''  ''Information Security Research Leader at Softtek ([http://www.linkedin.com/ppl/webprofile?vmi=&id=19874612&pvs=pp&authToken=Ypm2&authType=name&locale=en_US&trk=ppro_viewmore&lnk=vw_pprofile BIO]) ''
+| bgcolor="#b9c2dc" align="CENTER" | '''Keynote conference:''' About OWASP and its potential contribution in Mexico <br>'''Tom Brennan''' ''OWASP Board Member ([http://www.owasp.org/index.php/User:Brennan BIO])''<br />'''Juan Carlos Calderon''' ''Information Security Research Leader at Softtek ([http://www.linkedin.com/ppl/webprofile?vmi=&id=19874612&pvs=pp&authToken=Ypm2&authType=name&locale=en_US&trk=ppro_viewmore&lnk=vw_pprofile BIO]) ''
 |-
-| height="32" width="14%" align="right" | 9:45 - 10:45
+| height="17" width="14%" align="right" | 10:45 - 11:00
-| bgcolor="#eeeeee" align="CENTER" | Open Software Assurance Maturity Model (Open SAMM) <br>'''Pravir Chandra''' ''Director of Strategic Services at Fortify USA ([http://www.linkedin.com/ppl/webprofile?vmi=&id=6422052&pvs=pp&authToken=tGHR&authType=name&locale=en_US&trk=ppro_viewmore&lnk=vw_pprofile BIO])''
-|-
-| height="17" width="14%" align="right" | 10:45 - 11:00
 | bgcolor="#d98b66" align="CENTER" | '''Coffee Break'''
 |-
-| height="47" width="14%" align="right" | 11:00 - 12:00
+| height="17" width="14%" align="right" | 11:00 - 12:00
 | bgcolor="#b9c2dc" align="CENTER" | Statistics and Trends of cybercrime in Mexico <br> '''Ing. Fausto Estrella''' ''General coordinator of Technologic crime attention unit at Jalisco state CiberPolice''
 |-
 | height="47" width="14%" align="right" | 12:00 - 13:00
-| bgcolor="#b9c2dc" align="CENTER" | Information Privacy as a Business Risk in Mexico <br>(Under the new Mexican data protection Law perspective)<br> '''Victor Chapella''' ''CEO at Sm4rt Security Services, OWASP Mexico City Chapter Leader ([http://www.linkedin.com/profile?viewProfile=&key=472295&authToken=4v-c&authType=name BIO])''
+| bgcolor="#eeeeee" align="CENTER" | Open Software Assurance Maturity Model (Open SAMM) <br>'''Pravir Chandra''' ''Director of Strategic Services at Fortify USA ([http://www.linkedin.com/ppl/webprofile?vmi=&id=6422052&pvs=pp&authToken=tGHR&authType=name&locale=en_US&trk=ppro_viewmore&lnk=vw_pprofile BIO])''
 |-
 | height="17" width="14%" align="right" | 13:00 - 14:00
 | bgcolor="#d98b66" align="CENTER" | '''Lunch'''
 |-
-| height="32" width="14%" align="right" | 14:00 - 15:00
+| height="47" width="14%" align="right" | 14:00 - 15:00
-| bgcolor="#eeeeee" align="CENTER" | Avoiding roadblocks when implementing an enterprise application security program<br> '''Jesus Rosas''' ''Application Security Manager at GE Corporate ([http://www.linkedin.com/profile?viewProfile=&key=7797122&authToken=17rO&authType=NAME_SEARCH&locale=en_US&srchindex=1&pvs=ps&goback=.fps_jesus+rosas BIO])''
+| bgcolor="#b9c2dc" align="CENTER" | Information Privacy as a Business Risk in Mexico <br>(Under the new Mexican data protection Law perspective)<br> '''Victor Chapella''' ''CEO at Sm4rt Security Services, OWASP Mexico City Chapter Leader ([http://www.linkedin.com/profile?viewProfile=&key=472295&authToken=4v-c&authType=name BIO])''
 |-
-| height="47" width="14%" align="right" | 15:00 - 16:00
+| height="32" width="14%" align="right" | 15:00 - 16:00
-| bgcolor="#b9c2dc" align="CENTER" | '''Topic to be Confirmed''' <br> '''Eduardo Vela Nava''' ''Security Researcher at Google Mexico''
+| bgcolor="#eeeeee" align="CENTER" | Which Programming Language is More Secure?<br> '''Tom Brennan'''  ''OWASP Board Member ([http://www.owasp.org/index.php/User:Brennan BIO])''
 |-
 | height="17" width="14%" align="right" | 16:00 - 16:15
 | bgcolor="#d98b66" align="CENTER" | '''Coffee Break'''
 |-
-| height="17" width="14%" align="right" | 16:15 - 17:15
+| height="47" width="14%" align="right" | 16:15 - 17:15
-| bgcolor="#b9c2dc" align="CENTER" | Panel: Next Steps to fight cybercrime in Mexico <br> '''Moderator: Betty Cardiel''' ''Founder, CISO at PROSEG Information Security ([http://www.linkedin.com/profile?viewProfile=&key=22110245&authToken=e6Un&authType=NAME_SEARCH&locale=en_US&srchindex=1&pvs=ps&goback=.fps_albertina+cardiel BIO])''
+| bgcolor="#b9c2dc" align="CENTER" | WAFs, a step in the wrong direction? <br> '''Eduardo Vela Nava''' ''Security Researcher at Google Mexico''
+|-
+| height="17" width="14%" align="right" | 17:15 - 18:15
+| bgcolor="#eeeeee" align="CENTER" | Panel: Next Steps to fight cybercrime in Mexico <br> '''Moderator: Betty Cardiel''' ''Founder, CISO at PROSEG Information Security ([http://www.linkedin.com/profile?viewProfile=&key=22110245&authToken=e6Un&authType=NAME_SEARCH&locale=en_US&srchindex=1&pvs=ps&goback=.fps_albertina+cardiel BIO])''
 |-
-| height="17" width="14%" align="right" | 17:15 - 18:00
+| height="17" width="14%" align="right" | 18:15 - 19:00
 | bgcolor="#cccccc" align="CENTER" | '''Wrap-up and Announcement'''
+|-
+| height="17" width="14%" align="right" | &nbsp;
+| bgcolor="#ffffff" align="CENTER" | &nbsp;
+|-
+| height="17" width="14%" align="right" | 21:00 - .. : ..
+| bgcolor="#cccccc" align="CENTER" | '''Social Event at Ahma'''
 |}
+<br />
+'''After the event enjoy a free entrance and free shot at Ahma pub on OWASP Day Coordiation Team, remember to bring your badge!!!'''
 </center>
 <br>
 ==== Training  ====
-<br>We will have great training sessions the day prior the event (June 3rd), you can sign up [http://www.owaspdaymexico.com/registro.aspx here] (in Spanish), this link is only for people in Mexico, if you want to sign up from abroad send your contact information to [mailto:[email protected] Kate Hartmann] by email, she will give you details on how to deposit to OWASP Foundation Paypal account'''<br>
 <br><br>
 {| border=0 cellspan=0 style="border: 1px solid #999999" width=850
 |-
-| Securing Java Applications Using OWASP ESAPI
+|
-| Jim Manico (Aspect Security)
+===Application Security Essentials ''(2500 MX pesos - 210 USD)''===
-| 4000 MX pesos (350 USD)
+'''Rigoberto Juarez''' ''(ITESM)'' / '''Ruben Ventura''' ''(SME at Proseg)'' <br>
+- Learn about the most common vulnerabilities in applications, about how to exploit them, penetrate into systems and also how to avoid them. This is the minimal knowledge to every IT professional, given that 80% of the exploited vulnerabilities by hackers today are into the applications.
+- Schedule: 11:00 - 19:00
+| &nbsp;
 |-
-| Securing Web Applications with Layer7/Aplication Firewalls
+|
-| Alfredo Cristerna (Operations Director CE SOC/NOC at AXTEL)
+===Workshop - Developing Hacking skill with real world examples ''(2500 MX pesos - 210 USD)''===
-| 4000 MX pesos (350 USD)
+''' Hector Espinoza''' ''(Ethical Hacker at Softtek)'' <br>
+- Learn basic techniques to exploit buffer overflows, remote OS command execution, reverse engineering and DB intrusion by solving hacker challenges posted in hacking challenges sites. With the 5 year application security expert Hector Espinoza.<br>
+- Schedule: 11:00 - 15:00<br>
+'''IMPORTANT: Laptop is required to solve the exercises.''' <br>
+| &nbsp;
 |-
-| Application Security Essentials
+|
-| Rigoberto Juarez (ITESM) / Ruben Ventura (Proseg)
+===Securing Web Applications with Layer7/Aplication Firewalls ''(2500 MX pesos - 210 USD)''===
-| 2500 MX pesos (210 USD)
+'''Luis Martinez Bacha''' ''(Software Security Program Leader at Softtek)'' <br>
+- Learn how to use layer 7 (Application) software/devices to quickly protect your critical systems. Save time by not modifying major modification in application source code and protect systmes immediatelly to avoid vulnerabilities in third party products while definitive patches are available.<br>
+- Schedule: 15:00 - 19:00
+| &nbsp;
 |}
-'''If you would like to have an specific training session not listed here please contact us, we can negotiate and find an appropriate trainer'''
+'''After the course enjoy a free entrance and free shot at Ahma pub on OWASP Day Coordiation Team, remember to bring your badge!!!'''
+''If you would like to have an specific training session not listed here please contact us, we can negotiate and find an appropriate trainer''
 ==== Venue  ====
@@ Line 229: / Line 245: @@
 |<center>[[File:OneAgsHotel.jpg | link=http://www.onehotels.com/portal/p/en_MX/ONE/OSM/1/0/Availability/showHotelInformation.do?hotelCode=OSM&country=MX&city=2&checkInDate=&checkOutDate=&numberAdults=1&numberChildren=0&numberSeniors=&numberInfants=&numberRooms=1&iata=&promotion=&group=&agreement=&idioma=en_MX&marca=ONE&dominio=www.onehotels.com&marcadesc=one&hotel=oneaguascalientessanmarcos&destino=aguascalientes&hotelType=1]]</center>
 |<center>[[File:MarriotAGSHotel.jpg | link=http://www.marriott.com/hotels/travel/agumc-aguascalientes-marriott-hotel/ | 340x198px]]</center>
-|<center>[[File:Fiestamericana_aguascalientes_foto1.jpg | link=www.fiestamericana.com/aguascalientes | 340x198px]]</center>
+|<center>[[File:Fiestamericana_aguascalientes_foto1.jpg | link=http://www.fiestamericana.com/aguascalientes | 340x198px]]</center>
 |-
 | Discount Rate/Night : 500 MXN (~45 USD)<br>(includes breakfast)
@@ Line 243: / Line 259: @@
 {| cellspacing="10" border="0" align="center" style="background: none repeat scroll 0% 0% transparent; -moz-background-inline-policy: continuous; color: white;"
 |-
-|
+| align="center" |
 == Diamond Sponsor ==
 |-
-|[[Image:Softtek_logo_HIRes.jpg  | 150x83 px]]
+| align="center" | [[Image:Softtek_logo_HIRes.jpg  | 150x83 px]]
+|-
+| &nbsp;
 |-
-|
+| align="center" |
 == Platinum Sponsors ==
 |-
-| [[Image:ITERAsmall.jpg | 162x67 px]]
+| align="center" | [[Image:ITERAsmall.jpg | 162x67 px]] [[File:F5_logo.png]]
+|-
+| &nbsp;
 |-
-|
+| align="center" |
 == Gold Sponsors ==
 |-
-| [[Image:Denim_Group_Logo.gif]]
+| align="center" | [[Image:Denim_Group_Logo.gif]] [[Image:Sm4rt_logo.jpg | 162x67 px ]] [[Image:Proseg_Logo.gif]]
+|-
+| &nbsp;
 |-
-|
+| align="center" |
 == Silver Sponsors ==
 |-
-| &nbsp;
+| align="center" | [[Image:Logo_ahma_nuevo2.jpg | 162x67 px ]] [[Image:Logo_shirushi.jpg | 196x31 px ]]
 |-
-|
+| align="center" |
 == Bronze Sponsors ==
-|-
-| &nbsp;
 |-
 | &nbsp;
@@ Line 284: / Line 304: @@
 ==City Location==
-Aguascalientes, is located in in the heart of Mexico, 5 hours (by car) at south from Mexico City and 2 hours from Guadalajara City.<br><br>
+Aguascalientes, is located in in the heart of Mexico, 5 hours (by car) at north from Mexico City and 2 hours from Guadalajara City.<br><br>
 [[File:GoogleMapAGS.jpg|link=http://maps.google.com/maps?f=q&source=s_q&hl=es&geocode=&q=aguascalientes+mexico&sll=37.0625,-95.677068&sspn=32.80241,78.75&ie=UTF8&hq=&hnear=Aguascalientes,+M%C3%A9xico&ll=24.086589,-103.754883&spn=18.824794,39.375&z=5&iwloc=A Aguascalientes Map | 675x478px | Aguascalientes Google Map]]
 <br><br>
 == ITESM University Location==
 Is located in the north-west side of the city<br><br>