This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Bucharest AppSec Conference 2018 Workshops"

From OWASP
Jump to: navigation, search
Line 20: Line 20:
 
* Package extra tooling so that we better test the committed codebase
 
* Package extra tooling so that we better test the committed codebase
 
At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used.
 
At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used.
'''Intended audience:''' developers, security enthusiasts <br>
+
'''Intended audience:''' security engineers, developers, pentesters<br>
'''Skill level: ''' intermediate<br>
+
'''Skill level: ''' beginner - intermediate<br>
'''Requirements:''' coding skills, a laptop
+
'''Requirements:''' a laptop with Virtual Box installed
 
<br>
 
<br>
 
'''Seats available: '''20 (first-come, first served)<br>
 
'''Seats available: '''20 (first-come, first served)<br>

Revision as of 11:12, 10 August 2018

Workshop

Time Title Trainers Description
Workshop
25th of October
4 hours:
begins at 10:00

Automated CI Pipelines using ZAP, Docker and static code analysis Spyros Gasteratos Description: In this workshop we will go through customizing ZAP's docker images and some static code analysis scripts to work with GitLab CI so that it automatically tests the deployed web application.

Moreover we will write an example ZAP orchestration script to better test specific parts of the example application.
Last, we will create Docker containers of two static code analysis scripts so that we can easily integrate them into the CI pipeline.
We will go through:

  • Configuring GitLab CI to work with ZAP.
  • Configuring the testing harness to work with ZAP
  • Writing orchestration scripts to better test specific part of the application.
  • Package extra tooling so that we better test the committed codebase

At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used. Intended audience: security engineers, developers, pentesters
Skill level: beginner - intermediate
Requirements: a laptop with Virtual Box installed
Seats available: 20 (first-come, first served)
Price: free
[ Register here]

Workshop
25th of October

3 hours:
begins at 13:30


Description:

Intended audience:
Skill level:
Requirements:

Seats available:
Price: free
[Register here]

Workshop
25th of October
3 hours:
begins at 9:30


Description:

Prerequisites:

Software Requirements:

Seats available:
Price: free
[Register here]