|
|
| Line 9: |
Line 9: |
| | '''Introduction''' | | '''Introduction''' |
| | | | |
| − | Welcome to the OWASP Day 2017 Italy Conference. Following on from the great successes of last OWASP Days, the new conference will take place next '''20th October 2017 at the University of Cagliari'''. | + | Welcome to the OWASP Day 2018 Italy Conference. Thanks to Prog. Stefano Zanero and the Bsides Milano team we are organizing a unique event that will bean OWASP Day together with the Bsides Milan Conference. |
| − | Address: Auditorium of the Faculty of Engineering and Architecture, Piazza d'Armi, Cagliari. | + | Address: Aula De Donato Piazza Leonardo Da Vinci 32, Milano, Politecnico di Milano |
| | + | When: June 16th, 2018 |
| | | | |
| − | The Conference will be in ITALIAN language except the Gary McGraw one that will be in english. | + | Deadline: |
| | + | The registration will be open next 12nd April. |
| | + | The CFP will end next 30th April. |
| | | | |
| | The event sponsors: | | The event sponsors: |
| | <center> | | <center> |
| | <br> | | <br> |
| − | [[File:LOGO NUMERA.png | www.numera.it]]
| + | |
| − | [[File:LBL_TCOGROUPSRL_LOGO.png | www.tcoproject.com]]
| |
| − | [[File:Pluribus One 20-10-15.png | www.pluribus-one.it]]
| |
| | </center> | | </center> |
| | | | |
| − | [https://www.owasp.org/images/5/5f/OWASP-Italy2017Cfp.pdf Official Inviation]
| |
| − |
| |
| − | = Keynote =
| |
| − | <font size=2pt>
| |
| − |
| |
| − | == Gary McGraw ==
| |
| − | ''' Ph.D. Vice President Security Technology, Synopsys'''
| |
| − | {| style="background-color: transparent"
| |
| − | |-
| |
| − | ! width="200" align="center" | <br>
| |
| − | ! width="1000" align="center" | <br>
| |
| − | |-
| |
| − | | align="center" | [[Image:McGraw2015.jpg|200px]] [[Image:yy-hats.jpg|100px]]
| |
| − | |
| |
| − |
| |
| − | Gary McGraw is the Vice President Security Technology of Synopsys (SNPS), a silicon valley company headquartered in Mountain View, CA. He is a globally recognized authority on software security and the author of eight best selling books on this topic. His titles include Software Security, Exploiting Software, Building Secure Software, Java Security, Exploiting Online Games, and 6 other books; and he is editor of the Addison-Wesley Software Security series. Dr. McGraw has also written over 100 peer-reviewed scientific publications, authors a periodic security column for SearchSecurity, and is frequently quoted in the press. Besides serving as a strategic counselor for top business and IT executives, Gary is on the Advisory Boards of Max Financial, NTrepid, and Ravenwhite. He has also served as a Board member of Cigital (acquired by Synopsys) and as Advisor to Dasient (acquired by Twitter), Fortify Software (acquired by HP), and Invotas (acquired by FireEye). His dual PhD is in Cognitive Science and Computer Science from Indiana University where he serves on the Dean’s Advisory Council for the School of Informatics. Gary produces the monthly Silver Bullet Security Podcast for Synopsys and IEEE Security & Privacy magazine (syndicated by SearchSecurity).
| |
| − |
| |
| − | |}
| |
| − | <br>
| |
| | | | |
| | = Agenda = | | = Agenda = |
| − | The Conference will be in ITALIAN language except the Gary McGraw one that will be in english. | + | The agenda will be published next 12nd May 2018 |
| − | | |
| − | The schedule will be as follow:
| |
| − | | |
| − | <font size=2pt>
| |
| − | <center>
| |
| − | <table width="80%">
| |
| − | <tr>
| |
| − | <td valign=top>10:00h</td><td bgcolor="#eeeeee"><b>"Welcome and opening of the works"</b><br>Prof. Giorgio Giacinto, Ing. Davide Ariu - Università di Cagliari, Matteo Meucci OWASP Italy<br></td>
| |
| − | </tr>
| |
| − | <tr>
| |
| − | <td valign=top>10.15h</td><td bgcolor="#b9c2dc"><b>"Seven Things: Frank Zappa, T. Coraghasen Boyle, and Twenty-one Years in Security"</b><br> Ph.D. Gary McGraw, Synopsys<br></td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>11:15h</td><td bgcolor="#eeeeee"><b>"Software Protection: fighting reverse engineering in the ASPIRE project"</b><br>Dr. Paolo Falcarin, University of East London<br></td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>11.45h</td><td bgcolor="#b9c2dc"><b>"Coffee Break"</b><br><br></td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>12:00h</td><td bgcolor="#eeeeee"><b>"The OWASP Top 10 Proactive Controls v2"</b><br>Federico Fazzi, Minded Security<br></td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>12.30h</td><td bgcolor="#b9c2dc"><b>"Gestione delle vulnerabilità delle applicazioni software: un caso concreto di successo"</b><br>Dr. Roberto Obialero, Dr. Fabio Bucciarelli - Regione Emilia Romagna<br></td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>13:00h</td><td bgcolor="#eeeeee"><b>"Women In Security "</b><br>Dott.ssa Loredana Mancini, Vice Presidente WIA Committee (OWASP)<br>Annalisa Bonfiglio, Professore Ordinario e Presidente CRS4<br>Monica Pellegrino, Senior Research Analyst, ABILab<br>Maria Katiuscia Zedda, R&D&I Programme Manager - Abissi S.r.l./Abinsula S.r.l.</td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>13.30h</td><td bgcolor="#b9c2dc"><b>"Premiazione Concorso "Pixelettere di Contrabbando”, organizzato nell’ambito del progetto Europeo Dogana (https://www.dogana-project.eu/<br>Premiazione Concorso “Usa la Scienza con Coscienza”, organizzato dal PRALab dell'Università di Cagliari (https://pralab.diee.unica.it/it/UsaLaScienzaConCoscienza)<br></b>Ing. Davide Ariu</td>
| |
| − | </tr>
| |
| − | | |
| − | <tr>
| |
| − | <td valign=top>14:00h</td><td bgcolor="#eeeeee"><b>"Light lunch"</b><br></td>
| |
| − | </tr>
| |
| − | | |
| − | </table>
| |
| − | </center>
| |
| − | | |
| − | <br><br>
| |
| − | | |
| − | | |
| − | = Registration =
| |
| − | <br><br>
| |
| − | The Conference is entrance free but you need to register to participate.<br>
| |
| − | Please use the following form:<br>
| |
| − | | |
| − | [https://docs.google.com/forms/d/e/1FAIpQLScTVbKxY_YNnRpX_t4tG6eoaSuuBU5CcToWlKFO82jxUpndOg/viewform Register here please]
| |
| − | | |
| | | | |
| | | | |
| Line 106: |
Line 34: |
| | * As conclusion of the day, we organize a round table discussing the most interesting subjects came out during the event. | | * As conclusion of the day, we organize a round table discussing the most interesting subjects came out during the event. |
| | * Conference goal is creating a debate on which will be the evolution of the research for the Web Application Security, and how to start a secure software initiative. | | * Conference goal is creating a debate on which will be the evolution of the research for the Web Application Security, and how to start a secure software initiative. |
| − |
| |
| − |
| |
| − | '''References:'''
| |
| − | ----
| |
| − |
| |
| − | "Avete finito di imbottire le vostre reti di firewall e altre diavolerie simili? Allora è tempo di cambiare prospettiva e rendersi conto che oggi, dopo aver messo in sicurezza il perimetro dei nostri sistemi informativi, le minacce più serie provengono dalle nostre stesse applicazioni che, a volte, non sono progettate ed implementate, tenendo conto delle migliori pratiche di sviluppo di software sicuro. In questo campo l’OWASP rappresenta un punto di riferimento costante ed una miniera di informazioni e strumenti, ed al Ministero dell’Istruzione, Università e Ricerca abbiamo imparato ad apprezzarne i materiali e le informazioni disponibili sul suo sito web, nell’ambito del nostro gruppo che si occupa di sicurezza del sistema informativo. Per conoscere le iniziative dell’OWASP, avere un’anteprima delle principali novità in tema di sicurezza del software, incontrare i maggiori esperti in questo settore, partecipate all’OWASP DAY."<br>
| |
| − | '''Paolo De Santis – Dirigente della Direzione Generale per gli Studi, la Statistica ed i Sistemi Informativi del MIUR'''<br><br>
| |
| − |
| |
| − | “L’OWASP Day è il luogo e il momento per incontrare altri professionisti e appassionati del settore. E’ un’opportunità per conoscere direttamente dai protagonisti le metodologie, le tecniche e gli ambiti di ricerca nel mondo della sicurezza applicativa divenuto ormai il fattore principale, insieme a quello umano, nel campo dell’Information Security. “<br>
| |
| − | '''Massimo Trevisani—CSO IWBank'''<br><br>
| |
| − |
| |
| − | "Le conferenze OWASP in Italia rappresentano un momento importante di awareness sulla sicurezza applicativa. L'evento rappresenta un punto di riferimento in cui i professionisti dell'IT possono valutare nuovi approcci allo sviluppo sicuro del software e alla difesa delle proprie applicazioni on-line"<br>
| |
| − | '''Marco Bavazzano—CISO Telecom Italia'''<br><br>
| |
| − |
| |
| − |
| |
| − | = Sponsors =
| |
| − |
| |
| − | Thank you to our sponsors:
| |
| − | <center>
| |
| − | <br>
| |
| − | [[File:LOGO NUMERA.png | www.numera.it]]
| |
| − | [[File:LBL_TCOGROUPSRL_LOGO.png | www.tcoproject.com]]
| |
| − | [[File:Pluribus One 20-10-15.png | www.pluribus-one.it]]
| |
| − | </center>
| |
| | | | |
| | | | |
Welcome to the OWASP Day 2018 Italy Conference. Thanks to Prog. Stefano Zanero and the Bsides Milano team we are organizing a unique event that will bean OWASP Day together with the Bsides Milan Conference.
Address: Aula De Donato Piazza Leonardo Da Vinci 32, Milano, Politecnico di Milano
When: June 16th, 2018
Deadline:
The registration will be open next 12nd April.
The CFP will end next 30th April.
