This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Bucharest AppSec Conference 2018 Workshops"

From OWASP
Jump to: navigation, search
(edit6)
Line 19: Line 19:
 
* Writing orchestration scripts to better test specific part of the application.
 
* Writing orchestration scripts to better test specific part of the application.
 
* Package extra tooling so that we better test the committed codebase
 
* Package extra tooling so that we better test the committed codebase
At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used.
+
At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used.<br>
 
'''Intended audience:''' security engineers, developers, pentesters<br>
 
'''Intended audience:''' security engineers, developers, pentesters<br>
 
'''Skill level: ''' beginner - intermediate<br>
 
'''Skill level: ''' beginner - intermediate<br>
Line 28: Line 28:
 
[https://www.eventbrite.com/e/owasp-bucharest-appsec-conference-2018-tickets-47960216298 Register here]
 
[https://www.eventbrite.com/e/owasp-bucharest-appsec-conference-2018-tickets-47960216298 Register here]
 
|-
 
|-
| style="width:10%" valign="middle" height="30" bgcolor="#CCEEEE" align="center" colspan="0" | Workshop <br> 25th of October<br><br> '''3 hours:'''<br>begins at 13:30 <br>''' '''<br>
+
| style="width:10%" valign="middle" height="30" bgcolor="#CCEEEE" align="center" colspan="0" | Workshop <br> 25th of October<br> '''3 hours:'''<br>begins at 13:30 <br>''' '''<br>
 
| style="width:25%" valign="middle" height="30" bgcolor="#CCEEEE" align="center" colspan="0" | OAuth and OpenID Connect best practices<br>
 
| style="width:25%" valign="middle" height="30" bgcolor="#CCEEEE" align="center" colspan="0" | OAuth and OpenID Connect best practices<br>
  
Line 41: Line 41:
 
'''Seats available:'''<br>
 
'''Seats available:'''<br>
 
'''Price: '''free <br>
 
'''Price: '''free <br>
[https://www.eventbrite.com/e/owasp-bucharest-appsec-conference-2018-tickets-47960216298Register here]
+
[https://www.eventbrite.com/e/owasp-bucharest-appsec-conference-2018-tickets-47960216298 Register here]
 
|}
 
|}

Revision as of 17:23, 16 August 2018

Workshop

Time Title Trainers Description
Workshop
25th of October
3,5 hours:
begins at 09:00

Automated CI Pipelines using ZAP, Docker and static code analysis Spyros Gasteratos Description: In this workshop we will go through customizing ZAP's docker images and some static code analysis scripts to work with GitLab CI so that it automatically tests the deployed web application.

Moreover we will write an example ZAP orchestration script to better test specific parts of the example application.
Last, we will create Docker containers of two static code analysis scripts so that we can easily integrate them into the CI pipeline.
We will go through:

  • Configuring GitLab CI to work with ZAP.
  • Configuring the testing harness to work with ZAP
  • Writing orchestration scripts to better test specific part of the application.
  • Package extra tooling so that we better test the committed codebase

At the end of the workshop the attendees will have example configuration files, orchestration scripts, rules and Dockerfiles for all tools used.
Intended audience: security engineers, developers, pentesters
Skill level: beginner - intermediate
Requirements: a laptop with Virtual Box installed
Seats available: 20 (first-come, first served)
Price: free
Register here

Workshop
25th of October
3 hours:
begins at 13:30

OAuth and OpenID Connect best practices
Johan Peeters Description:

Intended audience:
Skill level:
Requirements:

Seats available:
Price: free
Register here