Open Security Summit 2022

Mini Summits

The Open Security Summit is organising monthly
Mini-Summits

Participate online and learn (for free)

Come Explore Open Security Summit Virtual Experience: You'll Be Able To Access All- New Sessions And Live Opportunities To Ask The Experts Questions On Key Topics. All virtual sessions are free to attend, just register to receive a notification and link to zoom session.

Next Summit: 12th - 15th Dec 2022

Monday - 12h

Tuesday - 13th

Wednesday - 14th

Thursday - 15th

Online

Online London

14:00 - 15:00

WS-14-15

Linux (kernel) containerization without Docker/runc/OCI

Dheeraj Madhukar

Demystifying Risk and the Future of Vulnerability Management

Sashank Dara

We need second-order thinking in security

Deepak Prabhakara

The Challenges With DNS Security

Jude Pereira

15:00 - 16:00

WS-15-16

Threat Modelling as Code v2

Petra Vukmirovic , Chen Gour Arie

Practical approach/considerations to developing a cybersecurity program

Richea Perry

Context is king; Prioritization is queen, and CVSS is dead

Francesco Cipollone

Low-code access control: Making the complex world of permissions approachable to everyone

Filip Grebowski

16:00 - 17:00

WS-16-17

Women in Cyber Security: Personal experiences and how to be an Ally

Ashley Burke , Karla Reffold , Melissa Ryan , Jana Camila

Using Open Source AppMap for Runtime Security Analysis

Pete Cheslock

Security business enabler: How to align your security program to business goals

Marius Poskus , Dinis Cruz

Automation and scale with OWASP ZAP

Tiago Mendo

17:00 - 18:00

WS-17-18

Privacy-The Challenges in Post Tornado Cash World

Anish Mohammed , John Marshall , Dinis Cruz

Open Policy Agent

Timo Pagel

Data Integrity and Information Integrity-they are enterprise not just CISO issues

Sarb Sembhi

WordPress: Hacking and Securing

Sam Stepanyan

18:00 - 19:00

WS-18-19

Quantifying Usability In Security Designs and Risk Assessments

Dinis Cruz , Tariq Rashid , Izar Tarandach

Cyber Insurance - a deeper approach

Dinis Cruz , Abbas Haidar , Andrew Lea

Crowdsourcing Security Talent

Dinis Cruz , Ante Gulam

Fileless Attacks and “Living off the Land binaries”: moving beyond just the “known bad” in security detection and response, and looking at how to prevent legitimate tools from being used in attacks (how to detect and respond)

Celine Pypaert , Craig Gilliger

19:00 - 20:00

WS-19-20

The Survival Guide to implementing Threat Modeling

Miguel Llamazares , Dave van Stein

20:00 - 21:00

WS-20-21

AMA with Alyssa Miller

Izar Tarandach , Alyssa Miller

All times bellow are BST (London time)

Monday - 12h Dec

14:00 - 15:00

DevSecOps

Linux (kernel) containerization without Docker/runc/OCI

Dheeraj Madhukar

15:00 - 16:00

Threat Modeling

Threat Modelling as Code v2

Petra Vukmirovic , Chen Gour Arie

16:00 - 17:00

Governance

Women in Cyber Security: Personal experiences and how to be an Ally

Ashley Burke , Karla Reffold , Melissa Ryan , Jana Camila

17:00 - 18:00

DevSecOps

watch using

Privacy-The Challenges in Post Tornado Cash World

Anish Mohammed , John Marshall , Dinis Cruz

18:00 - 19:00

Governance

Quantifying Usability In Security Designs and Risk Assessments

Dinis Cruz , Tariq Rashid , Izar Tarandach

19:00 - 20:00

Threat Modeling

The Survival Guide to implementing Threat Modeling

Miguel Llamazares , Dave van Stein

Tuesday - 13th Dec

14:00 - 15:00

Governance

Demystifying Risk and the Future of Vulnerability Management

Sashank Dara

15:00 - 16:00

Governance

Practical approach/considerations to developing a cybersecurity program

Richea Perry

16:00 - 17:00

DevSecOps

Using Open Source AppMap for Runtime Security Analysis

Pete Cheslock

17:00 - 18:00

DevSecOps

Open Policy Agent

Timo Pagel

18:00 - 19:00

Governance

Cyber Insurance - a deeper approach

Dinis Cruz , Abbas Haidar , Andrew Lea

20:00 - 21:00

Education

AMA with Alyssa Miller

Izar Tarandach , Alyssa Miller

Wednesday - 14th Dec

14:00 - 15:00

Governance

We need second-order thinking in security

Deepak Prabhakara

15:00 - 16:00

DevSecOps

Context is king; Prioritization is queen, and CVSS is dead

Francesco Cipollone

16:00 - 17:00

Governance

Security business enabler: How to align your security program to business goals

Marius Poskus , Dinis Cruz

17:00 - 18:00

Governance

Data Integrity and Information Integrity-they are enterprise not just CISO issues

Crowdsourcing Security Talent

Dinis Cruz , Ante Gulam

Thursday - 15th Dec

14:00 - 15:00

Governance

The Challenges With DNS Security

Jude Pereira

15:00 - 16:00

DevSecOps

Low-code access control: Making the complex world of permissions approachable to everyone

Filip Grebowski

16:00 - 17:00

DevSecOps

Automation and scale with OWASP ZAP

Tiago Mendo

17:00 - 18:00

DevSecOps

WordPress: Hacking and Securing

Fileless Attacks and “Living off the Land binaries”: moving beyond just the “known bad” in security detection and response, and looking at how to prevent legitimate tools from being used in attacks (how to detect and respond)

Celine Pypaert , Craig Gilliger

event album

Photo Gallery.

what they say

our Testimonials

Not even 10 minutes in and he just Already helped me overcome my own mapping inertia by realizing an issue I had, and how to get past it!

Avi Douglen - Leads consulting @BounceSecurity

This was absolutely excellent ‘Lightning Talk - Cybersecurity in M&A (a CISO’s guide) by @theFr0idDefinitely. Not a topic I’ve seen much on and a ton of takeaways.

Tony Towry - Product Manager

Was great fun to attend. Looking forward to leveraging what learned to put some value-add shape round some data and third party governance processes and tooling choices.

Sarah Clarke @ Infospectives - CIPP/E, InfoSecurity Expert