This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP AppSec Europe 2008 - Belgium"
(→Affiliated Partners) |
|||
| Line 219: | Line 219: | ||
Venue: Monasterium PoortAckere, Oude Houtlei 56, 9000 Gent [http://www.monasterium.be/ http://www.monasterium.be/] | Venue: Monasterium PoortAckere, Oude Houtlei 56, 9000 Gent [http://www.monasterium.be/ http://www.monasterium.be/] | ||
| + | |||
| + | ==Cocktail Party - May 20, sponsored by Breach Security== | ||
| + | |||
| + | In what is also becoming a tradition, there will be a cocktail party the night before the conference begins, sponsored by Breach Security. The free and open for all conference attendees event will be held at the Vintage Wine Bar at 6:30pm. We would appreciate it if you let us know if you are coming so we can be ready, please mail [email protected] to confirm. | ||
| + | |||
| + | [[Media:AppSec_EU_2008_Breach_Party.pdf|Details and direction map]] (updated May 7th with map and instructions from Monasterium Poortackere, the location of the training classes) | ||
==Evening Social Event - May 21== | ==Evening Social Event - May 21== | ||
| Line 226: | Line 232: | ||
Registration is available via the OWASP Conference Cvent site at: [http://guest.cvent.com/i.aspx?4W,M3,7b36ecdc-1234-4d63-bc08-898a7bf60b2a Cvent link] | Registration is available via the OWASP Conference Cvent site at: [http://guest.cvent.com/i.aspx?4W,M3,7b36ecdc-1234-4d63-bc08-898a7bf60b2a Cvent link] | ||
| − | == | + | ==OWASP Band - May 21, sponsored by Breach Security == |
| + | |||
| + | If that is not enough: tune in for the OWASP Band! Check out the vibes of last year [[OWASP Band | online]]. After the OWASP Dinner you can play, dance or listen to the greatest open-source band: THE OWASP Band. You play an instrument; the neighbours don't complain on your singing talents: contact dinis.cruz <at> owasp.org! | ||
| + | |||
| + | Venue: [http://www.whitecatbelgium.com/ The White Cat] | ||
| + | Time: 23h | ||
| − | + | Be there, or be ... | |
| − | |||
==Accommodations== | ==Accommodations== | ||
Revision as of 19:17, 13 May 2008
Welcome to the European OWASP Application Security Conference! After successful OWASP Conferences in the United States and Europe, we are back in Belgium: 5 tutorials and 2 conference tracks in the historic center of Ghent on May 19-22 2008!
The conference is stuffed with top notch presentations from industry recognised speakers and technical experts on the latest application security risks and trends. New for AppSec Europe: technical vendor demos and a Capture the Flag!
- 1 Conference Location
- 2 Agenda and Presentations - May 21-22
- 3 Tutorial Days - May 19-20
- 4 Cocktail Party - May 20, sponsored by Breach Security
- 5 Evening Social Event - May 21
- 6 OWASP Band - May 21, sponsored by Breach Security
- 7 Accommodations
- 8 Registration and Conference Fees
- 9 OWASP on a Plane - CONFidence 2008
- 10 Conference Committee
- 11 Affiliated Partners
- 12 Conference Sponsors
Conference Location
The historic center of Ghent, Belgium May 19th-22nd.
Main Conference: May 21st-22nd
Registration is available via the OWASP Conference Cvent site at: Cvent link
If you are registering as a Speaker or Sponsor, please use the following link: Cvent link for speakers/sponsors
Agenda and Presentations - May 21-22
The agenda follows the successful OWASP conference two tracks format, with opening keynotes and presentations in the main auditorium, split tracks in the middle of the day, and closing pannel discussions back in the main auditorium both days. As in the previous editions, the OWASP AppSec Europe 2008 conference will feature a refereed papers track.
| Day 1 - May 21, 2008 | ||
|---|---|---|
| Track 1: | Track 2: | |
| 08:00-09:00 | Registration and Coffee | |
| 09:00-09:05 | Welcome to OWASP AppSec 2008 Conference
Sebastien Deleersnyder | |
| 09:05-09:45 | Keynote: The Great Information Security Scrap Yard Challenge
Mark Curphey, Microsoft | |
| 09:45-10:20 | Owasp State of the Union
Dinis Cruz | |
| 10:20-10:40 | Break | |
| 10:40-11:20 | Fundamental Application Security Building Blocks - The Benefits of Establishing an Enterprise Security API (ESAPI) for Your Organization
Dave Wichers, Aspect Security |
Trends in Web Hacking: What's hot in 2008 Analysis of the Web Hacking Incidents Database (WHID) Ofer Shezaf, Breach |
| 11:20-12:00 | Evaluation Criteria for Web Application Firewalls
Ivan Ristic, Breach |
HTML5 security
Thomas Roessler |
| 12:00-12:30 | The OWASP Orizon Project internals
Paolo Perego |
Remo presentation (Positive ModSecurity rulesets / Input validation)
Christian Folini |
| 12:30-14:00 | Lunch | |
| 14:00-14:40 | Best Practices Guide: Web Application Firewalls (OWASP German chapter)
Alexander Meisel |
Input validation: the Good, the Bad and the Ugly |
| 14:40-15:20 | NTLM Relay Attacks
Eric Rachner |
PHPIDS Monitoring attack surface activity |
| 15:20-15:50 | Agile Security - Breaking the Waterfall Mindset of the Security Industry
Dave Wichers, Aspect Security |
Security framework is not in the code
Sam Reghenzi |
| 15:50-16:10 | Break | |
| 16:10-17:00 | Exploiting Online Games
Gary McGraw, Cigital |
SHIELDS: metrics, tools and Internet services to improve security in application developments
Domenico Rotondi, TXT e-solutions Spa |
| 17:00-18:00 | Panel: The PCI 6.6 dogfight - to Scan or to WAF, this is the question
Moderator: Ofer Shezaf Panelists: tbd | |
| 18:00-19:00 | OWASP Leader Meeting - Organized by Matteo Meucci | |
| 19:00-21:00 | OWASP Social Gathering: Dinner and Drinks at the Monasterium | |
| Day 2 - May 22, 2008 | ||
| Track 1: | Track 2: | |
| 08:00-09:00 | Coffee | |
| 09:00-9:40 | Keynote: Software Security: State of the Practice 2008
Gary McGraw, Cigital | |
| 9:40-10:20 | Tour of OWASP projects
Dinis Cruz (Chief OWASP Evangelist), Dave Wichers (OWASP Board), Michael Eddington (OWASP Encoding Project, .NET Web Service Validation Project) and Mark Roxberry (OWASP .NET Project) | |
| 10:20-10:40 | Break | |
| 10:40-11:20 | Graph Analysis for WebApps: From Nodes to Edges
Simon Roses Femerling, Microsoft |
The OWASP Education Project
Martin Knobloch |
| 11:20-12:00 | Dynamic Taint Propagation: Finding Vulnerabilities Without Attacking
Matias Madou, Fortify |
Threat Modeling for Application Designers & Architects |
| 12:00-12:30 |
Scanstud: Evaluating static analysis tools Martin Johns, Moritz Jodeit, Wolfgang Koeppl, Martin Wimmer |
Office 2.0: Software as a Service, Security on the Sidelines?
John Heasman, NGSSoftware |
| 12:30-14:00 | Lunch | |
| 14:00-14:40 | How Data Privacy affects Applications and Databases | Refereed papers track
Invited talk: Prof. Dieter Gollmann: Know Thyself! |
| 14:40-14:50 | The OWASP Anti-Samy project
Jason Li, Aspect Security | |
| 14:50-15:10 | Refereed papers track
fukami and Ben Fuhrmannek: SWF and the Malware Tragedy | |
| 15:10-15:20 | Refereed papers track
Andrew Petukhov and Dmitry Kozlov: Detecting Security Vulnerabilities in Web Applications Using Dynamic Analysis with Penetration Testing | |
| 15:20-15:30 | Google-Hacking and Google-Shielding
Amichai Shulman | |
| 15:30-15:50 | Refereed papers track
Matias Madou, Edward Lee, Jacob West and Brian Chess: Watch What You Write: Preventing Cross-Site Scripting by Observing Program Output | |
| 15:50-16:10 | Break | |
| 16:10-16:30 | Client-side security
pdp |
Refereed papers track
Evgeny Lebanidze: The Need for Fourth Generation Static Analysis Tools for Security - From Bugs to Flaws |
| 16:30-16:50 | Refereed papers track
Etienne Janot and Pavol Zavarsky: Preventing SQL Injections in Online Applications: Study, Recommendations and Java Solution Prototype Based on the SQL DOM | |
| 16:50-17:00 | Refereed papers track
Arshan Dabirsiaghi: Building and Stopping Next Generation XSS Worms | |
| 17:00-17:10 | ||
| 17:00-18:00 | Panel: Responsible "tbd"
Moderator: tbd Panelists: tbd |
Panel: "tbd"
Moderator: tbd Panelists: tbd |
| 18:00-18:10 | Conference Wrap Up - Dave Wichers, OWASP Conferences Chair | |
Venue: Aula, Ghent University, Voldersstraat 9, 9000 Ghent Google Maps Link
Registration is available via the OWASP Conference Cvent site at: Cvent link
Tutorial Days - May 19-20
OWASP arranged for several Application Security tutorials on May 19th-20th, the days prior to the conference.
| T1. Building and Testing Secure Web Applications |
|---|
| Most developers, IT professionals, and auditors learn what they know about application security on the job, usually by making mistakes. Application security is just not a part of many computer science curricula today and most organizations have not focused on instituting a culture that includes application security as a core part of their IT security efforts. This powerful two day course focuses on the most common web application security problems, including the OWASP Top Ten. The course will introduce and demonstrate hacking techniques, illustrating how application vulnerabilities can be exploited so students really understand how to avoid introducing such vulnerabilities into their code.
Trainer: Jason Li, Aspect Security - Read more here! |
| T2. Leading the Development of Secure Applications |
| In this one-day management session you’ll get the answers to the ten key questions that most CIOs and development managers face when trying to improve security in the development process. The course provides proven techniques and valuable lessons learned that can be applied to projects at any phase of their application’s lifecycle.
Trainer: Arshan Dabirsiaghi, Aspect Security - Read more here! |
| T3. Building Secure Rich Internet Applications |
| Rich Internet applications using technologies like Ajax, Flash, ActiveX, and Java Applets require special attention to secure. This one day training addresses the special issues that arise in this type of application development.
Trainer: Arshan Dabirsiaghi, Aspect Security - Read more here! |
| T4. Building Secure Web Services |
| The movement towards Web Services and Service Oriented architecture (SOA) paradigms requires new security paradigms to deal with new risks posed by these architectures. This session takes a pragmatic approach towards identifying Web Services security risks and selecting and applying countermeasures to the application, code, web servers, databases, application, and identity servers and related software. Many enterprises are currently developing new Web Services and/or adding and acquiring Web Services functionality into existing applications -- now is the time to build security into the system!
Trainer: Dave Wichers, Aspect Security - Read more here! |
| T5. Open Source ModSecurity Training |
| ModSecurity is currently the most widely deployed web application firewall (WAF) product. This two-day class is for those people who want to learn how to build, deploy, and use ModSecurity in the most effective manner. The course will cover the open source ModSecurity Console, which helps manage alerts on suspicious web activity targeting your web servers. The course also provides an in-depth look at the extremely powerful ModSecurity Rules Language.
Trainer: Ryan Barnett, Breach - Read more here! |
More information about the tutorials are online.
Venue: Monasterium PoortAckere, Oude Houtlei 56, 9000 Gent http://www.monasterium.be/
Cocktail Party - May 20, sponsored by Breach Security
In what is also becoming a tradition, there will be a cocktail party the night before the conference begins, sponsored by Breach Security. The free and open for all conference attendees event will be held at the Vintage Wine Bar at 6:30pm. We would appreciate it if you let us know if you are coming so we can be ready, please mail [email protected] to confirm.
Details and direction map (updated May 7th with map and instructions from Monasterium Poortackere, the location of the training classes)
Evening Social Event - May 21
At every conference we have an evening social event the first night. This allows participants to have some unstructured time to mingle with the other attendees. They are always fun and typically attract about half the conference attendees. This year's event will be a Flemish buffet with special Belgian beers at the Monasterium (near the conference location).
Registration is available via the OWASP Conference Cvent site at: Cvent link
OWASP Band - May 21, sponsored by Breach Security
If that is not enough: tune in for the OWASP Band! Check out the vibes of last year online. After the OWASP Dinner you can play, dance or listen to the greatest open-source band: THE OWASP Band. You play an instrument; the neighbours don't complain on your singing talents: contact dinis.cruz <at> owasp.org!
Venue: The White Cat Time: 23h
Be there, or be ...
Accommodations
- OWASP arranged for a room block of 20 Executive Deluxe rooms at the NH Gent Belfort at a rate of €199 per night. This room block is being held through April 11!! After that date, there is no guarantee that rooms at this rate will be available at the NH Gent Belfort.
- OWASP attendees have an option for 20 rooms at € 122 and 10 rooms at € 132 per night at the Hotel Monasterium PoortAckere up until April 30. Use OWASP as reference when booking your room. Please note that there are no more rooms for the night of May 22.
- OWASP arranged for a room block of 25 rooms at the IBIS hotels. You can already contact them on Hotel Ibis Gent Centrum Opera (€ 89 per night - 10 rooms) and Hotel Ibis Gent Centrum Kathedraal (€ 99 per night - 15 rooms of which 3 still available for the 22nd) - reservations through e-mail: H0961-RE at accor.com or fax: 0032/9 233 10 00 (before April 19 - reference OWASP).
It is difficult getting rooms at reduced prices, as there is a medical congress around the same time in Ghent. You will find it difficult to get a room for the night of May 22. We recommend you then book a room for one night near the airport of Brussels.
The following is a list of nearby accommodations that may have availability:
- List of hotels in Ghent
- Hotel Vandervalken Nazareth - on Highway 5 minutes from Ghent
- A list of bed and breakfasts in Ghent
- Youth hostels in Ghent
Registration and Conference Fees
Registration is available via the OWASP Conference Cvent site at: Cvent link
The conference fee for this conference is :
- Standard: 350 Euros, OWASP Members: 300 Euros, Students: 225 Euros.
- Conference Dinner (Evening of May 21st): 50 Euros
- Conference Tutorials: 825 Euros, Student Fee: 430 Euros
- CONFidence Poland 2008 members get a € 35 reduction on OWASP (see OWASP On a Plane below).
- ISSA, ISACA and L-SEC Members get a € 35 reduction.
Note: To save on processing expenses, all fees paid for the OWASP conference are non-refundable. OWASP can accomodate transfers of registrations from one person to another, if such an adjustment becomes necessary.
OWASP on a Plane - CONFidence 2008
This year's CONFidence 2008 will take place on 16-17.05.2008 in Cracow (Poland). They have decided to spend Saturday morning talking about OWASP-related projects. No more excuses: you can attend 2 OWASP events in a row in Europe!
Conference Committee
OWASP Conferences Chair: Dave Wichers - Aspect Security - dave.wichers 'at' owasp.org
2008 EU Planning Committee Chair: Sebastien Deleersnyder - Telindus - seba 'at' owasp.org
Vendor Exhibition Chair: Pravir Chandra - Cigital - chandra 'at' cigital.com
Capture the Flag Chair: Pieter Danhieux - Ernst & Young - pieter.danhieux 'at' be.ey.com
Refereed Papers Chair: Lieven Desmet - KU Leuven - Lieven.Desmet 'at' cs.kuleuven.ac.be
Affiliated Partners
We are glad to have the local support of:
- ISACA
- ISSA
- L-SEC
- Leuven University
Conference Sponsors
The following organizations are sponsors for this conference. If you are interested in sponsoring an OWASP conference, please contact OWASP at: conferences 'at' owasp.org.
More information about conference sponsorship is available here.
