Difference between revisions of "OWASP IRELAND 2010"

Latest revision as of 11:19, 25 September 2010

Welcome to the Irish OWASP Application Security Conference!

On September 17th, 2010 OWASP held its second Irish Application Security conference in Dublin University, Trinity College, Dublin, Ireland.

About

The conference consisted of an intensive day of talks/presentations and discussion with 2 different tracks focusing on the causes and trends in web application insecurity.

Finally six months of work by the OWASP Ireland chapter board paid off:

Many thanks :
- To every one who attended, helped out, presented, ran about.
- To Samy Kamkar who came over to enlighten us all about how he'll meet your girlfriend.......
- To John Viega, Fred Piper and Damian Gordon for their keynotes, they were great and provoked much discussion.
- To all our local and international speakers who took time (and expense) to come over and present...
- Also thanks to our sponsors for all assistance.

Colin Watson who attended covered the event very nicely here:
http://www.clerkendweller.com/2010/9/17/OWASP-AppSec-Ireland-2010--Part-2?utm_source=twitterfeed&utm_medium=twitter

Next stop:

OWASP Europe 2011
June/July 2011
Dublin Ireland

Photos and slides of OWASP Ireland 2010 event will be available shortly... stay tuned!

Venue

Trinity College, Dublin
Map of hamilton Building Location

Dining Hall location

Sponsorship

OWASP is providing sponsors exclusive access to its audience in Dublin, Ireland through a limited number of Expo floor slots, providing a focused setting for potential customers. The conference is expected to draw 150 - 200 technologists who will be looking for ways to spend their remaining 2010 budget and planning for 2010/11. Financial Services, Media, Pharmaceuticals, Government, Healthcare, Technology, and many other verticals will be represented.
Sponsorship details are available here:  Please review or sponsorship proposal: Click_here

Sponsors

Silver Sponsors

Supported by

Agenda

The agenda follows the successful OWASP conference two tracks format, with opening keynotes and presentations in the main auditorium, split tracks in the middle of the day, and closing pannel discussions back in the main auditorium both days.

Training

We intend to hold some application security training on the 16/09/2010 the day prior to the event.
This can be booked when booking a ticket to the event.

Secure Application Development: Writing secure code (and testing it)

Trainers:

Eoin Keary  Senior Manager, Ernst & Young, OWASP Board Member

Rahim Jina Senior Consultant, Ernst & Young, OWASP Ireland chapter board.

Abstract
Writing Secure code is the most effective method to securing your web applications. Writing secure code takes skill and know-how but results in a more stable and robust application and assists in protecting an organisations brand.

Application security is not commonly a part of many computer science curricula today and most organizations have not focused on instituting a culture that includes application security as a core part of their software development training efforts. This intensive one-day course focuses on the most common web application security problems, including aspects of both the OWASP Top Ten (2010) and the MITRE Top 25.  The course will introduce and demonstrate application assessment techniques, illustrating how application vulnerabilities can be exploited so students really understand how to avoid introducing such vulnerabilities in their code.

This course includes coverage of the following areas:

• Unvalidated Input
• Injection Flaws
• Cross-Site Scriping
• CSRF
• Authentication & Session Management
• Access control & Authorisation
• Broken Caching
• Error Handling &Resource Management
• Cryptography
• Rich Internet Applications
• The Secure SDLC

Hands on

To cement the principles discussed, students can participate in a number of hands-on security testing exercises where they attack a live web application (i.e., WebGoat etc) that has been seeded with common web application vulnerabilities. The students will use proxy tools commonly used by the hacker community to complete the exercises. Students need to bring their own windows based laptop to participate in the exercises.

Audience

Developers who want to understand the most common web application security flaws, and how to avoid them and code in a secure manner

Level

Intermediate

Prerequisite

Basic knowledge of a web programming language like Java or .NET recommended but not required.

Bringing your own windows based laptop is recommended so you can participate in the hands on exercises.

Duration

Full day - 8 Hours

Registration

Registration is now closed

Travel

By Air

Fly to Dublin Airport: http://www.dublinairport.com/
A taxi or bus can take you into Dublin city. (€30 - Taxi) (€10 - Bus)

Hotels

Recommended Hotel:

A hotel has been block booked in the middle of the city for the OWASP Event in Dublin in September:
http://www.owasp.org/index.php?title=OWASP_IRELAND_2010

The rooms have been booked for the 16th and 17th September and shall be held for OWASP until September 3rd.

Hotel in question is The Morgan Hotel:
http://www.themorgan.com/

Rate - 150 euro per room per night, bed and breakfast

Please quote "Trinity College" and contact hotel reservations 01 6437061 or email [email protected]

Trinity College:

Please see here if you wish to stay within the grounds of Trinity College:
http://www.owasp.org/images/2/20/TCD_Tariff_2009.pdf

Hotels Surrounding Trinity College:

http://maps.google.com/maps?near=Dame+Street,+College+Green,+Dublin+2,+Ireland+(Trinity+College+Campus)&geocode=Cfm6cyTmqt_IFev1LQMdLZCg_yFJu3aKhBD7GA&q=hotels&f=l&dq=Trinity+College+loc:+Dublin+Ireland&sll=53.341482,-6.258302&sspn=0.012043,0.037637&ie=UTF8&ei=U6TMSZSzKpSw2QLG_-CUCA&attrid=1036f063d3d0dafc_&ll=53.343711,-6.254568&spn=0.012042,0.037637&z=15

Raffle

Special RAFFLE:
The draw for the Visual Studio 2008 Training raffle took place 3rd September 2010 at the New Horizons Ireland offices in central Dublin.

Alan Deery, Sales Manager at New Horizons Ireland, pulled the winning ticket (http://www.owasp.org/index.php/File:P1050389.JPG)

And the winner is... Chris Adams, please contact Alan Deery or Fabio Cerullo to provide you further details on how to claim your prize.

Congratulations to the winner and a big thank you to everyone who took part.

Photos

To be available soon.

Conference Committee

2010 Ireland Planning Committee Chair:

Eoin Keary - eoin.keary 'at' owasp.org

Fabio Cerullo  - fcerullo 'at' owasp.org

Rahim Jina - rahim.jina 'at' owasp.org