Italy OWASP Day 2018

Back to the Italian Chapter

WELCOME

Introduction

Welcome to the OWASP Day 2018 Italy Conference. Thanks to Prof. Stefano Zanero and the Bsides Milano team we are organizing a unique event that will be an OWASP Day together with the Bsides Milan Conference.

Address: Aula De Donato Piazza Leonardo Da Vinci 32, Milano, Politecnico di Milano

When: June 16th, 2018

• Agenda
• Organization and goals

9.00 – 10:00 – Registration

10.00 – 10:10 – Opening

10:10 – 11:50 – Red Teaming 

Speaker: James Hovous

Title of Presentation: “Catch me if you can – Artifacts left by red teamers” – English

Speaker: Assaf Carlsbad and Yarden Shafir

Title of Presentation: “Deep hooks: Monitoring native execution in WoW64 applications” – English

11:50 – 12:10 – Break

12:10 – 13:30 – Breaking and Building

Speaker: Cesare Pizzi

Title of Presentation: “Ardusploit – PoC of code injection on Arduino” – Italian/English

Speaker: Andrea Allievi

Title of Presentation: “Intel Txt, Measured Boot and the Windows Implementation” – Italian/English

13:30 – 14:30 – Lunch

14:30 – 16:00 – Cloud Security

Speaker: Marco Pacchiardo

Title of Presentation: “API Security” – Italian/English

Speaker: Venkatesh Sivakumar

Title of Presentation: “Unconventional vulnerabilities in Google Cloud Platform” – English

16:00 – 16:20 – Break

16:20 – 18:00 – Windows Infrastructure Attack

Speaker: Brian Contos – TBC

Title of Presentation:

“Grandmother, Gangster, Guerrilla and Governament” – English

Speakers: Guglielmo Scaiola

Title of Presentation: “AD, Mimikatz, ATA and (awe)some evasion techniques” – Italian

18:00 – 18:20 – Conclusion

• The event will show several points of discussion: we will present the state of the art of the Secure Software Initiatives and technical speeches about the new researches in Application Security.
• We will organize a round table regarding women in Application Security.
• As conclusion of the day, we organize a round table discussing the most interesting subjects came out during the event.
• Conference goal is creating a debate on which will be the evolution of the research for the Web Application Security, and how to start a secure software initiative.