This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
German OWASP Day 2014/Programm
Agenda / Vorträge / Presentations
Downloads
Details zu den Vorträgen
Keynote: —
Florian Stahl and Stefan Burgmair — OWASP Top 10 Privacy Risks
Discussions about how to protect personal data are lively, but still there is no specific and independent description of privacy risks for web applications available. Thus, companies lack guidance to apply during systems development and users cannot easily check whether they take privacy risks when using certain web applications. Therefore the OWASP Top 10 Privacy Risks project was founded in February 2014 to develop a top 10 list for privacy risks in web applications. It covers technological and organizational aspects like missing encryption or insufficient transparency. The project got huge attention from privacy and security experts worldwide and was chosen as key input for the Internet Privacy Engineering Network (IPEN) founded by the European Data Protection Supervisory earlier this year. This session will be the first presentation of the OWASP Top 10 Privacy Risks at a public conference.
Further information about the OWASP Top 10 Privacy Risks Project is available on the project Website.
Sebastian Schinzel — Scannen des gesamten IPv4 WWW
Amir Alsbih — Praktische Erfahrungen aus hunderten von Sicherheitsabnahmen
Walter Tighzert — Cloud encryption: encrypt all the things!
Achim Hoffmann and Torsten Gigler — Richtig verschlüsseln mit SSL/TLS
Bruce Sams — Hacken und Absichern von iOS Anwendungen
Closing Note: —
Sprecher / Speaker
(in alphabetischer Ordnung)
Amir Alsbih
Stefan Burgmair
Torsten Gigler
Torsten Gigler - Dipl.-Ing. Elektrotechnik (Univ.) - Netz- und Unix-Sicherheit seit Ende der 90er Jahre - (Web-)Anwendungssicherheit seit 2001 - arbeitet seit 1993 in der IT eines Großunternehmens - bei OWASP seit 2 Jahren aktiv (z.B. Projektleiter 'OWASP Top 10 für Entwickler') - O-Saft-Nutzer und seit einem knappen Jahr in der Freizeit Mitentwickler (Analyse der SSL/TLS-Protokolle und Cipher durch Simulation der 1. Phase des Verbindingsaufbaus)
Achim Hoffmann
Achim Hoffmann is a senior security consultant for information security services, in particular anything related to (web) application security. He is regular speaker at conferences, writes articles and best pratice guides. He is member of the German OWASP Board. Achim initiated and developed the OWASP tool O-Saft for deep analyzes of SSL/TLS connections.
Bruce Sams
Sebastian Schinzel
Florian Stahl
Florian Stahl is a German security and privacy consultant and evangelist. He is Master in information systems and computer science and has CISSP and CIPP/IT certifications. Currently Florian is Lead Consultant at msg systems in Munich. He is regular speaker at conferences and writes articles on his blog securitybydesign.de. Florian founded and leads the OWASP Top 10 Privacy Risks Project.
Walter Tighzert
Walter Tighzert is as a Senior Security Researcher at SAP SE and currently works on cloud security topics, in particular encryption in the cloud.
