Italy OWASP Day 2014 Genova

Back to the Italian Chapter

• Welcome
• Keynote
• Agenda

Thanks to the collaboration with Prof. Alessandro Armando and to the availability of Gary McGraw, Ph.D. CTO, Cigital we are planning an incredible OWASP Day next 14th May. The Conference will be hosted by the Dipartimento di Informatica Bioingegneria, Robotica e Ingegneria dei Sistemi (DIBRIS) of the University of Genova. If you have any questions, please email the conference committee: [email protected]

Use the #owaspitaly hashtag for your tweets for OWASP Italy Day 2014 (What are hashtags?) @OwaspItaly Twitter Feed (follow us on Twitter!) <twitter>262394051</twitter>

Gary McGraw

Ph.D. CTO, Cigital

"Cyber War, Cyber Peace, Stones, and Glass Houses". Washington has become transfixed by cyber security and with good reason. Cyber threats cost Americans billions of dollars each year and put U.S. troops at risk. Yet, too much of the discussion about cyber security is ill informed, and even sophisticated policymakers struggle to sort hype from reality. As a result, Washington focuses on many of the wrong things. Offense overshadows defense. National security concerns dominate the discussion even though most costs of insecurity are borne by civilians. Meanwhile, effective but technical measures like security engineering and building secure software are overlooked. In my view, cyber security policy must focus on solving the software security problem ­ fixing the broken stuff. We must refocus our energy on addressing the glass house problem instead of on building faster, more accurate stones to throw. Gary McGraw is the CTO of Cigital, Inc., a software security consulting firm with headquarters in the Washington, D.C. area and offices throughout the world. He is a globally recognized authority on software security and the author of eight best selling books on this topic. His titles include Software Security, Exploiting Software, Building Secure Software, Java Security, Exploiting Online Games, and 6 other books; and he is editor of the Addison-Wesley Software Security series. Dr. McGraw has also written over 100 peer-reviewed scientific publications, authors a monthly security column for SearchSecurity and Information Security Magazine, and is frequently quoted in the press. Besides serving as a strategic counselor for top business and IT executives, Gary is on the Advisory Boards of Dasient (acquired by Twitter), Fortify Software (acquired by HP), Raven White, Max Financial, and Wall+Main. His dual PhD is in Cognitive Science and Computer Science from Indiana University where he serves on the Dean’s Advisory Council for the School of Informatics. Gary served on the IEEE Computer Society Board of Governors and produces the monthly Silver Bullet Security Podcast for IEEE Security & Privacy magazine (syndicated by SearchSecurity).

The schedule will be as follow:

• 15:00 Alessandro Armando - Welcome
• 15:05 Gary McGraw - Cyber War, Cyber Peace, Stones, and Glass Houses
• 16:30 Break
• 16:45 Stefano di Paola - Client Side Vulnerabilities in the Web Environment
• 17:30 Matteo Meucci - Introduction to OWASP and the new projects
• 17:45 Alessandro Armando - A Gentle Introduction to Browser-based Single-Sign On protocols and OAuth 2.0