AppSec ASIA 2016
- 1 Welcome
- 2 CFP
- 3 Schedule
- 4 Speaker Bios
- 5 Training
- 6 Registration and Fees
- 7 Venue
- 8 Sponsoring
- 9 Travel and Accommodation
- 10 Supporting Organization
- 11 Team
- Speaker Bios
- Registration and Fees
- Travel and Accommodation
- Supporting Organization
APPSEC ASIA 2016
Call for Paper
OWASP AppSec ASIA 2016 will bring together application security experts and software engineers from all over the world on May 21, 2016. Industry and academia meet to discuss open problems and new solutions in web & mobile security. For this event, we will invite application security researchers, thought leaders and developers worldwide to submit papers for presentations looking for “the next”, cutting edge research in the context of web applications, secure development, security management and privacy. Don't miss the opportunity to share and discuss your ideas and knowledge with other experts and practitioners.
The topics of interest, but not limited:
- Web Security
- Mobile Security
- Cloud Security, specifically secure Cloud Apps
- Infrastructure security
- Secure development
- Application Security Testing
- Privacy protection in web based apps
- Emerging web technologies and associated security considerations
- Security Trainings, Certificates and CTP
Papers should describe new ideas, new implementations, or experiences related to web & mobile security. We are glad to have some leading-edge topics and ideas as well as in-depth discussion in the conference. The conference planning team will review your submission based on a descriptive abstract of your intended presentation. Feel free to attach a preliminary version of your presentation if available, or any other supporting materials. Remember: the better your description is, the better our review will be.
Submission deadline: Mar 25, 2016.
Notification of acceptance: Mar 31, 2016.
Presentation PPT due: April 30, 2016.
To submit a proposal please use easy chair https://easychair.org/conferences/?conf=appsecasia2016wuhanc
To contact the conference planning team, please mail to [email protected]
OWASP Speaker Agreement: https://www.owasp.org/index.php/Speaker_Agreement
Likely we can cover travel expenses or costs for accommodations.
By your submission you agree to the OWASP Speaker Agreement. OWASP values vendor neutrality. You need to use the OWASP presentation template and you’re not allowed to place marketing pitches in your slides. All presentation slides will be published on the conference website after the conference. Please make sure that any pictures and other materials in your slides don’t violate any copyrights. You are solely liable for copyright violations. You may choose any CC license for your slides, including CC0. OWASP does suggest open licenses.
|| Venue |
|9：15-9：45||30|| OWASP Mobile 2016 & Self-healing apps
Milan Singh Thakur
|9：45-10：15||30|| Testing next-gen iOS apps
|10：15-10：30||15||Coffee & Tea Break||大厅|
|10：30-11：00||30|| Big problems with big data - Hadoop interfaces security
|11：00-11：30||30|| OWASP CISO Survey Report – Tactical Insights for Managers
|11：30-12：00||30|| OWASP Top 10: Effectiveness of Web Application Firewalls
|14：30-15：00||30|| Cloud-ids：智能Web 入侵检测与威胁感知
|15：30-15：50||20||Coffee & Tea Break||大厅|
|16：20-16：50||30|| Engineering better security
|14：00-14：40||40|| Capture-the-Flag Secrets
|15：50-16：10||20||Coffee & Tea Break||大厅|
Milan Singh Thakur
- OWASP Mobile 2016 & Self-healing apps
Milan is very passionate about Information Security and an International Speaker. He is leading OWASP Mobile Security Project Globally under which Mobile Appsec Guide, Checklist and various Cheatsheets are being developed. He also works as Information Security Consultant for a private firm in India. His primary focus is Mobile Security. He has helped to secure mobile apps for various well known clients in banking, insurance, health, e-commerce and other sectors. Recently he has done PT for Apple iWatch for a client. He has expertise in fields like secure code review, NFC Pentesting, Web Appsec, VAPT activities, Wireless Pentesting, Payment Gateway Security Assessments and lot more. His scope of exploration is not limited to these technologies. He is strong supporter of “Open-Source” terminology and has been promoting it since 2010.
- Testing next-gen iOS apps
An OWASP member and contributor has been working in the infosec industry for over 5 years. During his five years, he has performed a number of penetration tests on mobile and web applications and even developed a lot of applications for the App Store. His core focus area is mobile pentesting and embedded device hacking. He is also the author of the open source vulnerable application named Damn Vulnerable iOS app. He has presented and trained at Conferences like Defcon, Blackhat USA, Brucon, Hack in paris, Phdays etc.
- Big problems with big data - Hadoop interfaces security
A Senior IT Security Consultant at SecuRing and performs penetration tests of high-risk applications, systems and devices. He was a speaker at many international IT Security conferences: OWASP AppSec EU, BlackHat Asia, PHdays, CONFidence, HackInTheBox AMS, as well at local events. Previously working for European Space Agency and internet payments intermediary. Apart from testing applications, he digs into proprietary network protocols, embedded devices and other enterprise solutions.
- OOWASP CISO Survey Report 2015 – Tactical Insights for Managers
CTO Security for global IT company. Chairman of the Board of OWASP, Chair of the IAOC. Experience asHead of Information Security, Chief Information Security Officer, CISO, IT Risk Management, Governance & Compliance Head of Software Development, CTO, Manage in global, multinational and complex organisations, Change Management, project management, M&A, Strategy, ArchitectureSDLC, Software development processes and standards CCISO, CISSP, CSSLP.
David Caissy, M. Sc., OSCP, GWAPT, GPEN, GSEC, CISSP, CEH is a web application penetration tester with in-depth developer and IT Security background spanning over 16 years. He has extensive experience in conducting vulnerability assessments and penetration tests as well as providing training globally, amongst numerous other teaching engagements. He has worked for a central bank, various government agencies and private companies. David has been teaching web application security in colleges, conferences and for many government agencies over the last 15 years.
Founder and CEO of Compass Security, a leading Swiss ethical hacking and penetration testing company. Speaker @ BlackHat Las Vegas 2008, IT Underground Warsaw 2009, Unistrategic Singapore 2010 and organizer of Swiss Cyber Storm Security Conference since 2007.
HP Enterprise Software全球安全技术主管，负责年营业额10亿美元的软件产品线的总体安全，以及SDL(软件安全开发流程)在公司内部的实施。OWASP上海分会负责人，CWASP资深讲师，拥有CSSLP和CISSP认证，是《Web应用安全威胁与防治》的作者之一。
Leader of OWASP China.
| Course Name
|| Course Length
|| Course Date(s)
|OWASP Top 10 Effective Safeguards||David Caissy||4H||May20,8:30-12:00||English||RMB 1500|
|Mobile Application security||Prateek Gianchandani||4H||May20,14:30-18:30||English||RMB 1500|
- Price per attendee.
- 15% off for OWASP Senior Member
- 15% off for groups of above 10
- Conference Registration is separate.
Free for OWASP China Member.
Mail to [email protected] for training registration.
Please note that conference and training Registration is separate.
We are looking for sponsors for AppSec ASIA 2016.
If you are interested to sponsor AppSec ASIA 2016, please contact the conference team:[email protected]
Sponsorship Deadline is April 10, 2016.
To find out more about the different sponsorship opportunities please check the document below:
OWASP AppSec ASIA 2016 Sponsorship
Wuhan Tianhe International Airport
Hotel & City Guide is coming soon.
AppSec ASIA 2016 Conference Planning Team
- Miya Xu
- Ivy Zhang
- Xiaoli Tan
Do you want to volunteer for AppSec ASIA 2016?Conference Planning Team
AppSec ASIA 2016 Volunteer Team
- Ankit Giri
- Samit Anwer
OWASP Staff Support
- Laura Grau
- Kelly Santalucia
- Kate Hartmann
- Noreen Whysel
Contact us at Conference Planning Team