Mrb Scratchpad

Day 1 - Nov 12th 2009
	OWASP	Tools	SDLC	Web 2.0
07:30-09:00	Registration
08:45-09:00	Welcome and Opening Remarks
09:00-10:00	Keynote: Joe Jarzombek
10:30-10:30	Coffee Break & Room Change
10:30-11:30	OWASP ESAPI Jeff Williams	Manipulating Web Application Interfaces, a new approach to input validation Felipe Moreno-Strauch	Development Issues Within AJAX Applications: How to Divert Threats Lars Ewe	Understanding the Implications of Cloud Computing on Application Security Dennis Hurst
11:30-12:30	Software Assurance Maturity Model (SAMM) Pravir Chandra	The Case of Promiscuous Parameters and Other Ongoing Capers in Web Security Jacob West	Enterprise Application Security - GE's approach to solving root cause and establishing a Center of Excellence Darren Challey	Transparent Proxy Abuse Robert Auger
12:30-13:30	DISA's Application Security and Development STIG: How OWASP Can Help You Jason Li	OWASP ModSecurity Core Rule Set Project Ryan C. Barnett	The essential role of infosec in secure software development Kenneth R. van Wyk	Fracturing Flex For Fun- An Alliterative Attackers Approach Jon Rose/Kevin Stadmeyer
13:30-14:30	Lunch
15:30-16:30	Defend Yourself: Integrating Real Time Defenses into Online Applications Michael Coates	Finding the Hotspots: Web-security testing with the Watcher tool Chris Weber	SDLC Panel	Social Zombies: Your Friends Want to Eat Your Brains Tom Eston/Kevin Johnson
16:30-17:30	The ESAPI Web Application Firewall Arshan Dabirsiaghi	One Click Ownage Ferruh Mavituna		Cloudy with a chance of 0-day Jon Rose/Tom Leavey
		Web Application Security Scanner Evaluation Criteria Brian Shura
17:30-17:30	OWASP Live CD: An open environment for Web Application Security Matt Tesauro / Brad Causey	Learning by Breaking: A New Project Insecure Web Apps Chuck Willis	Vulnerability Management in an Application Security World Dan Cornell	Attacking WCF Web Services Brian Holyfield
		Synergy! - A world where the tools communicate Josh Abraham
18:30-19:30	The Entrepreneur's Guide to Career Management Lee Kushner	Advanced SSL: The good, the bad, and the ugly Michael Coats	Threat Modeling John Steven	When Web 2.0 Attacks - Understanding Security Implications of AJAX, Flash and "Highly Interactive" Technologies Rafal Los
		User input piercing for Cross Site Scripting Attacks Matias Blanco
19:30-????	Reception