OWASP Minneapolis St Paul 2009 Conference

The OWASP Minneapolis-St. Paul (MSP) chapter is pleased to announce an afternoon of information security presentations on August 24, 2009 at the St. Paul Student Center Auditorium/Theater on the University of Minnesota - Twin Cities campus.

Presentations will be posted shortly after the event. Links to the presentation material will be provided below at that time.

Registration and Directions to Event

A registration link will be provided shortly. On site registration the day of the event is not expected to be available due to anticipated demand, so please register prior to the event to guarantee your seat at this event.

Google Maps Directions to the St. Paul Student Center

Thank You to Our Sponsors

The event coordinators are currently finalizing sponsorship details.

Agenda

12:30 PM - 1:30 PM	Registration / Check-In
1:30 PM - 1:45 PM	Kuai Hinojosa OWASP MSP President Topic: Event Introduction The OWASP MSP chapter has had a successful year, and will be looking ahead to even more participation in the global OWASP community. Bio: Speaker provided bio.
1:45 PM - 2:30 PM	Speaker TBD Position, Organization with Link Topic: Topic TBD. The speaker in this time slot will be discussing OWASP and the PCI-DSS. Bio: Speaker provided bio.
2:30 PM - 2:45 PM	Break
2:45 PM - 3:30 PM	Pravir Chandra Director of Strategic Services, Fortify Topic: OpenSAMM The Software Assurance Maturity Model (SAMM) is an open framework to help organizations formulate and implement a strategy for software security that is tailored to the specific risks facing the organization. Pravir Chandra, creator and leader of the project, will be discussing OpenSAMM. For more information on OpenSAMM, visit http://www.opensamm.org/. Bio: (From fortify.com) Chandra is widely recognized in the industry for his expertise in software security, security training, and code analysis, and also for his ability to apply technical knowledge strategically from a business perspective. Most recently, Chandra was an independent consultant where he worked with clients to build and optimize software security programs. Prior to that, he was affiliated with Cigital as a Principal Consultant where he developed role-based training curricula and led large software security programs at Fortune 500 companies. Chandra was also Co-Founder and Chief Security Architect at Secure Software, Inc. before the company was acquired by Fortify Software.
3:30 PM - 3:45 PM	Break
3:45 PM - 4:45 PM	Bruce Schneier schneier.com Topic: The Future of the Security Industry: IT is Rapidly Becoming a Commodity More companies are outsourcing their IT infrastructure -- treating it as a service more like electricity, office cleaning, or tax preparation -- and this has profound implications for IT security. Organizational users care less about the technical details of security. Products and services change their focus from the end user to the outsourcer. Industry consolidation results, as non-security IT infrastructure companies seek to bolster their security credentials. Even the profession changes, as jobs move from individual organizations to the outsourcing companies, and in some cases overseas. This talk looks at the future of IT security in a mature IT infrastructure industry. Bio: (From schneier.com) Bruce Schneier is an internationally renowned security technologist and author. Described by The Economist as a "security guru," he is best known as a refreshingly candid and lucid security critic and commentator. When people want to know how security really works, they turn to Schneier.
4:45 PM	Event Closing