Schedule

Summit Week (15th - 19th June)

Monday - 9th

Tuesday - 10th

Wednesday - 11th

Thursday - 12th

Friday - 13th

Online

KN-1

Keynote - Open Security Summit 2020

Open Security Summit

10:30 - 12:00

WS-1

AMA with Simon Wardley

Dinis Cruz , Simon Wardley

Reciprocity: Tales of an Anthropologist in Cybersecurity

Lianne Potter

14:00 - 15:00

WS-14-15

Shodan OSINT Automation to Mass Exploitation of Vulnerabilities

Dheeraj Madhukar

Demystifying Risk and the Future of Vulnerability Management

Sashank Dara

From Kubernetes to a Portable Secure and Compliant Platform: Databases, Message Queues and Caches

Cristian Klein

Tune your Toolbox for Velocity and Value (SCA)

Josh Grossman

Automating Architectural Risk Analysis with the Open Threat Model format

Fraser Scott

Predicting the rise and fall of an open source project

Emil Wåreus

We need second-order thinking in security

Deepak Prabhakara

Fundamentals of Cloud Security, Threat Identification, AWS Services

Rakesh Elamaran

The Challenges With DNS Security

Jude Pereira , Dinis Cruz

Cloud PenTesting Concepts , CloudGoat Walkthrough , Securing Cloud Endpoints

Rakesh Elamaran

Using Teleport to Secure SSH and Kubernetes Access

Sakshyam Shah

15:00 - 16:00

WS-2

A perspective on automating 3rd party risk assessment. How to free up your staff, and improve speed by automaton with guardrails.

Owen John

Challenges in IoT security: from infinite recommendations to a plethora of implementations

Maya Boeckh

Remote Threat Modeling

Didar Gelici

Scaling Threat Models visualisations using PlantUML and VisJS

Dinis Cruz , Petra Vukmirovic , M. Lucía Pappaterra , Chris Diao , Lwasampijja Baker , Abbas Haidar

Graph Based Vulnerability Management

Petra Vukmirovic

How Owasp can help Security Teams - Guides and Testing Tools

Dinis Cruz , Sam Stepanyan , Grant Ongers , Vandana Verma

How Owasp can help Security Teams - DevSecOps

Dinis Cruz , Sam Stepanyan , Grant Ongers

Moldable development with Glamorous Toolkit Part 2

Dinis Cruz , Tudor Girba

SOC2 Certification for SaaS companies

Abbas Haidar

Threat Modeling Using Glamorous Toolkit

Tudor Girba , Dinis Cruz

Using Domain Specific Languages (DSL) for testing

Pandy Knight

Scaling Incident Response using Jira, Jupyter and GSuite

Luke Robbertse , Abbas Haidar , Petra Vukmirovic

Threat Modeling Glasswall Cloud SDK

Dinis Cruz , Petra Vukmirovic , Chris Holman , Abbas Haidar

16:00 - 17:00

WS-3

AMA with OWASP Board

Dinis Cruz , Grant Ongers , Andrew van der Stock , Vandana Verma

SDA SE Cluster Scanner is going Open Source

Timo Pagel

Using VPC Flows to monitor EC2 Traffic

Michael Hidalgo

Wardley Maps and services model at Glasswall

Steve Purkis

What to do in preparation for a Threat Model

Petra Vukmirovic , Abbas Haidar , Chris Holman

Compliant Kubernetes - Case Study

Jakub Krzywda , Cristian Klein

How Owasp can help Security Teams - Guides and Testing Tools

Dinis Cruz , Sam Stepanyan , Grant Ongers , Vandana Verma

Moldable development with Glamorous Toolkit Part 1

Dinis Cruz , Tudor Girba

Rules & Recommendations: Are we pushing our new IoT device out correctly?

Maya Boeckh

Threat Modeling Glasswall Desktop

Dinis Cruz , Petra Vukmirovic , Mudit Gupta

Agile Threat Modeling with Open-Source Tools

Christian Schneider

CDR API Standard

Dinis Cruz , Elvin White

CDR Engine Standard (Part 1)

Paul Burke

How Owasp can help Security Teams - DevSecOps

Dinis Cruz , Sam Stepanyan , Grant Ongers

Secure By Scenario

Juan Spinel

Secure By Scenario

Juan Spinel

CDR Engine Standard (Part 2)

Paul Burke

Positive Security models and Rebuilding into a "Known Good" state

Dinis Cruz

Sonar Cube Integrations with GitHub

Petra Vukmirovic , Jameel Nabbo

The RATs and CATs of Risk - Graph based Risk Framework

Petra Vukmirovic , Abbas Haidar , Chris Holman

Yor:Automated IaC tag and trace

Stephen Giguere

ASVS User Stories creation

Mario Platt

ASVS User Stories creation (part 1)

Mario Platt

Creating Secure Builds of Containers

Petra Vukmirovic , Michael Hidalgo

Hacking threat modeling

Luis Servin

How Variant Analysis and CodeQL helped secure the fight against COVID-19

Alvaro Muñoz

Moldable development with Glamorous Toolkit Part 3

Dinis Cruz , Tudor Girba

17:00 - 18:00

WS-4

For bugs start with a passing test (and 99% code coverage)

Dinis Cruz

Content Delivery & Security Association

Ben Schofield

Creating 1 million kubernetes pods - Lessons learned

Matthew Pigram , Dharam Patel

Managing projects using Github Issues and ZenHub

Georgina Gonzalez

Secure By Scenario

Juan Spinel

Security-Scan your production images

Timo Pagel

Bakeoff - Anti-virus vs CDR vs Sandboxing

Paul Burke

Distroless Containers

Timo Pagel

DSOMM News and Belts-Workshop

Timo Pagel

Introduction into OWASP DSOMM

Timo Pagel

ASVS User Stories creation

Mario Platt

ASVS User Stories creation (part 2)

Mario Platt

Threat Modeling Glasswall Folder-to-Folder Plugin

Dinis Cruz , Petra Vukmirovic , Chris Holman , Abbas Haidar

15:00 - 16:00

WS-15-16

Addressing the cyber unemployment crisis; a positive outlook

Richea Perry

Dependency Management and Supply Chain Security

Christian Köberl

How we build a security automation software utilizing open-source components (Betterscan.io)

Marcin Kozlowski

IoT: pervasive vulnerability, threat landscape and end-users

Maya Boeckh

Panel - Prioritizing Risks and Vulnerabilities based on Context

Dinis Cruz , Petra Vukmirovic , Francesco Cipollone

Shift-Right Security: Emphasizing Post-Deployment Monitoring and Response (Panel)

Dinis Cruz , Omer Yaron , Marius Poskus

Starbase - Graph-based security analysis for everyone

Austin Kelleher , Adam Pierson

Threat Modelling as Code v2

Petra Vukmirovic , Chen Gour-Arie

Utilising Security Champions Product Teams

Kimberley Graham

Web application's language negotiation in 2023

André Ferreira

“Shift Left” Isn’t What You Expected

Chen Gour-Arie

AppSec Threats Deserve Their Own Incident Response Plan

Omer Yaron

CVSS, CVE, Vulnerabilities and the land of broken dreams

Francesco Cipollone

Developing Secure Multi-Cloud Kubernetes Applications

Petra Vukmirovic , Dinis Cruz

IoT and Cyber Threat Intelligence: Staying Ahead of the Curve (Panel)

Dinis Cruz

OISRU - Open Information Security Risk Universe (Panel)

Sashank Dara , Dinis Cruz , Eliza-May Austin , Puneet Ahuja

OWASP WrongSecrets: a journey into secret management failures

Jeroen Willemsen

Practical approach/considerations to developing a cybersecurity program

Richea Perry

Privacy As Code: Open-Source Developer Tools For Data Privacy

Thomas La Piana

Protecting Critical Data, through the implementation of Information Security Management System to meet compliance

Richea Perry

SemGrep in the CI/CD Pipeline: Automating Code Quality and Security Checks (Panel)

Dinis Cruz

The Cloud Security Architects aka the knights of the cloud kingdom - Panel Discussion

Petra Vukmirovic , Manos Skalidis , Francesco Cipollone , Lee Newcombe , Kriti Mohun

The Human Firewall

Richea Perry

Threat Hunting and Detection Strategies: Proactive Defense in Action (panel)

Dinis Cruz , Marius Poskus

ChatGPT for Security Teams - What & How

Dinis Cruz

Cloud Security Best Practices: Navigating the Evolving Landscape (Panel)

Dinis Cruz

Cloud-Native Security Tools: Enhancing Cloud Protection Capabilities(Panel)

Dinis Cruz , Gabriel L. Manor , Or Weis , Oded Ben David

Context is king; Prioritization is queen, and CVSS is dead

Francesco Cipollone

Cooking the perfect docker container for a react app Part 2

Luis Servin

Cyber Insurance

Abbas Haidar

Going Multicloud: Securing Human and Service Identities in AWS vs Azure

Lior Zatlavi

Hands-on Workshop: Utilize OWASP DSOMM App to Define and Deliver Your Own Program

Timo Pagel

Kubernetes Security

Uday Thubati

Linux (kernel) containerization without Docker/runc/OCI

Dheeraj Madhukar

OWASP WrongSecrets: define the future challenges together

Jeroen Willemsen , Ben De Haan

The Rise of AI Security Engineers

Stefan Streichsbier

A call for Metrics

Timo Pagel , Lars Hermerschmidt , Benjamin Trapp

ChatGPT impact on Cyber and Application Security (Panel)

Dinis Cruz , Nathan Case

Cooking the perfect docker container for a react app

Luis Servin

DevSecOps for Modern Identity and Access Management

Or Weis , Barak Schoster Goihman , Dinis Cruz , Marius Poskus

Docker For Security Professionals

Rakesh Elamaran

Low-code access control: Making the complex world of permissions approachable to everyone

Filip Grebowski

Making ASVS truly yours

Luis Servin

Product Permissions - Common Pitfalls and How Not to Fall For Them

Or Weis

Ransomware Resilience: Strategies for Prevention and Recovery (Panel)

Dinis Cruz

Rise of Automotive Attacks (Panel Discussion)

Abbas Haidar , Dinis Cruz

Risk Acceptance and OISRU (Panel)

Dinis Cruz

Threat Modeling Kata Part 3

Luis Servin

Using DataDog for Incident Response (Panel)

Nathan Case , Laura de Vesine , Dinis Cruz

Zero trust in distributed media workflows for Hollywood

Ben Schofield

AI Agents for Cyber Threat Intelligence

Matthew Thompson

Blockchain and its Security

Anish Mohammed , Chenxi Wang , Dinis Cruz , Zenobia Godschalk , James Hooker

Check out their (lateral) moves! The importance of blast radius in DevSecOps

Matt Johnson

DevSecOps Maturity Model Updates

Timo Pagel , Prakarsh Gupta

GitHub Security Tools (Panel)

Dinis Cruz , Eliza-May Austin , Chris Reddington , Michael Meaney

How to overcome DNS security threats

Osman Karan

Leveraging Artificial Intelligence and Machine Learning in Recruitment(Panel)

Dinis Cruz

Machine Learning in SemGrep: Leveraging AI for Enhanced Static Analysis(Panel)

Dinis Cruz

Security Vendors - Operating Model

Dinis Cruz , Nick Harris

Social Engineering Attacks: Strengthening Human Firewall(Panel)

Dinis Cruz

Threat Modelling as Code and Threat Modelling Challenges

Petra Vukmirovic , Marios Clark

Using AppMap runtime code visualizations to scout for security flaws

Elizabeth Lawler , Kevin Gilpin

Who Goes There? Actively Detecting Intruders With Cyber Deception Tools

Dwayne McDaniel

16:00 - 17:00

WS-16-17

A workshop on DAST and how to put it into your pipeline

Tanya Janca

AI-Driven Threat Modelling with STRIDE GPT

Matthew Adams

Application Security vulnerabilities - measurements, maturity magic - Vulnerability Framework Project

Francesco Cipollone

Can we trust AI with our Cyber defences?

James Dell

Lessons learned from trying to create Architecture Diagrams As Code

Martin Obiols

Mapping Threat Intelligence: Enhancing Situational Awareness (Panel)

Dinis Cruz , Marius Poskus , Simon Wardley

Panel - Wardley Maps in Cyber Security

Dinis Cruz , Simon Wardley , Krzysztof Daniel , Nick Harris

Shift Smart - risk based approach on appsec

Francesco Cipollone

Supply Chain Security: Strengthening Resilience Against Third-Party Risks(panel)

Dinis Cruz , Marius Poskus

Threat Modeling the LLM Pipeline

Brandon Green

Women in Cyber Security: Personal experiences and how to be an Ally

Ashley Burke , Karla Reffold , Melissa Ryan , Jana Caniglia

API Security by Design

Jose Haro Peralta

Applying Zero Trust Principles to OT/ICS (Operational Technology & Industrial Control Systems)

Celine Pypaert

CISO Role in 2023 (Panel)

Dinis Cruz , Sheetal Joseph , Abbas Haidar , Tim Ward , Sarb Sembhi

Continuous Access Control with OPAL and Cedar

Gabriel L. Manor

Deterministic GenAI Outputs with Provenance

Dinis Cruz

Risk Communication: Bridging the Gap between Risk Professionals and Executives (Panel)

Danny Lopez , Richea Perry , Chen Gour-Arie , Marius Poskus , Guy Marong , Maciej Owsiany

Security as Code: A DevSecOps Approach

Joseph Katsioloudes

Threat Modeling Kata VI

Luis Servin

Threat Modeling V

Luis Servin

Using Open Source AppMap for Runtime Security Analysis

Pete Cheslock

Alert Readiness Framework

Rui Shantilal

Conducting effective Table Top Exercises for Cyber Incident Response Practise (Panel)

Dinis Cruz , Venkat Ramshet , Nathan Case , Guy Marong

In the moment nudges – What? How? Applying nudge theory to awareness

Tim Ward

Live threat modeling of an "online food ordering" system

Luis Servin

OWASP Wrong Secrets: project goals, under the hood, and where do we go from here?

Ben Dehaan , Jeroen Willemsen

Security business enabler: How to align your security program to business goals

Marius Poskus , Dinis Cruz

Taking responsibility for your software - How to simply monitor your solutions for known vulnerabiities and keep your customers informed

Jan Thielscher

Threat Model for an Autonomous System

Abbas Haidar

Using OWASP Nettacker for Recon and Vulnerability Scanning

Sam Stepanyan

When C4s meet Threat Models

Marios Clark , Ahmed Mohamed , Petra Vukmirovic

A Cyber Security Roadmap: How To?

Abbas Haidar

Anticipating the Future: Strengthening App Security through Developer-Centric Foresight

Jeremy Treadwell

AppSec Trending & recommendations:Fixing Security in Cloud & Appsec

Francesco Cipollone

Automation and scale with OWASP ZAP

Tiago Mendo

Defense in Depth Layers: Practical Security for LLMs on Google Cloud

Alexander Meissner

Micro, Mid-Range, Macro - How Gen AI Risk Breaks Us

Sarah Clarke , Mitch Cohen , Nick Drage

The challenge of auditing smart contract audit, especially ones with more advanced cryptographic primitives such as ZKP or MPC

Anish Mohammed

Threat Modeling Kata IV

Luis Servin

Using GenAI to Create Personalized Cybersecurity News Feeds

Dinis Cruz

Using Presentations instead of CVs and Creating Diverse Security Teams

Alex Emmerson , Dinis Cruz , Samuel Ubido , Brian Hinojosa

Using Splunk for Incident Response (Panel)

Dinis Cruz

Emerging Roles in Cybersecurity: Adapting Recruitment Strategies(Panel)

Dinis Cruz

GitLab Security Tools (Panel)

Dinis Cruz

How can we make Grafana a great open source security tool?

Dinis Cruz , Thomas Owen

Let’s go on a DATA with vulnerabilities

Francesco Cipollone

Open Security Control Testing at Scale

Luis Saiz

Securing CI/CD runners through eBPF agent

Mert Coskuner , Cenk Kalpakoglu

Use GenAI to Understand and Transform Content, Not to Create It

Dinis Cruz

Women kick off in Cybersecurity

Kiran Gandhi , Surbhi Gupta

16:00 - 18:00

WS-16-18

CVE CWE CVSS CWSS where do I look first?

Francesco Cipollone

Abuse Tests for Developers

Timo Pagel

Threat mapping - A workshop discussion

Jakub Kaluzny

Using Jira to Map and Visualise Risks

Petra Vukmirovic , Abbas Haidar , Chris Holman

ASVS User Stories creation

Mario Platt

ASVS User Stories creation - Part 6

Mario Platt

ASVS User Stories creation - Part 7

Mario Platt

ASVS User Stories creation - Part 8

Mario Platt

ASVS User Stories creation - Part 9

Mario Platt

17:00 - 18:00

WS-17-18

How to perform threat assessments, the right way!

Saber Ferjani

Improving Mental Health & Security Outcomes Through Flow States

Kashyap Thimmaraju

Kubernetes Clusters Network Security

Dinis Cruz , Nathan Case

Mental Health in Cyber Security

Sarb Sembhi , Dr Daniel Shore , Kashyap Thimmaraju , Rebecca McKeown , Peter Olivier , Paul Simms

Parsec-Hardware security at your fingertips

Paul Howard

Privacy-The Challenges in Post Tornado Cash World

Anish Mohammed , John Marshall , Dinis Cruz

SOAR - Security Orchestration, Automation, and Response (Panel)

Dinis Cruz , Venkat Ramshet , Pratibha Malik , Nick Harris

The next Insider Threat isn't your staff!

Sarb Sembhi

The Truth about suffering a cyber-attack

James Dell

Threat Modeling Failure Modes

Izar Tarandach

Threat Modeling Kata Part 2

Luis Servin

Zero Trust Network Access Framework

Jude Pereira

Advanced Persistent Threat (APT) Mapping and Mitigation

Dinis Cruz , Simon Wardley

Attack Surface Mapping

Simon Wardley , Dinis Cruz , Tariq Rashid , Krzysztof Daniel , Tudor Girba

Battling the coming wave, Understanding cybersecurity in 2024

James Dell

ChatGPT: Cyber Risks & How to Harden Against Them

Celine Pypaert , Craig Gilliver , Dinis Cruz , Abbas Haidar

CISO Roundtable - Mar 2022

Ante Gulam , Chase Fopiano , Dinis Cruz , Nick Gibson , Marios Clark , Sheetal Joseph

Incident Response Playbooks (Panel)

Dinis Cruz , Eliza-May Austin , Venkat Ramshet , Nick Harris

Open Policy Agent

Timo Pagel

Permission Models As Code - Securing the Entire Stack

Raz Cohen , Oded Ben David

Regulatory Developments in Cybersecurity(Panel)

Dinis Cruz , Alan Jenkins

Security Champions - Sharing Experiences

Dinis Cruz , Timo Pagel

Taking Your DevOps Tooling To The Dark Side

Mike Guthrie

The Cybersecurity Talent Gap: Addressing the Growing Skills Shortage(Panel)

Dinis Cruz , Chen Gour-Arie

Are our users always smarter than AI?

Sarb Sembhi

Building Security Champions

Tanya Janca

Data Integrity and Information Integrity-they are enterprise not just CISO issues

Sarb Sembhi

Finding and Hiring Security Talent (Panel)

Dinis Cruz , Michael Meaney , Eliza-May Austin , Brian Hinojosa

Improving DevOps using GenAI: Understanding, Visualizing, and Optimizing

Dinis Cruz

Scaling CyberSecurity teams using GenAIs and FMs

Ante Gulam , Dinis Cruz , Jakub Kaluzny

Threat Modeling for Serverless Architectures: Identifying Risks in a Serverless World (Panel)

Dinis Cruz , Luis Servin , Ayse Vlok , Omer Yaron

Turning the Tide : How to convince Senior Management and Ownership to invest in Cybersecurity

James Dell

Using GenAI to scale CISO's reporting workflows

Dinis Cruz

Build state of the art SOC with Mitre Attack

Marius Poskus

Combatting Adversarial AI: The Role of CISOs, CTOs and the Top Management in Defending Against AI-Powered Cyberattacks(Panel)

Dinis Cruz , Alan Jenkins , Omer Yaron

Stories of Female empowerment in Cyber Security

Ashley Burke , Taylor Hendrickson , Shailynn Hacker , Kasia Cichon

Technics to limit hallucinations when using a LLM solution like ChatGPT

Matthew Thompson

Using Elastic for Incident Response (Panel)

Dinis Cruz , Eliza-May Austin

Zero Trust Architecture: Strengthening Cloud Security Posture (Panel)

Dinis Cruz , Nathan Case , Ogechukwu Okonor , Gabriel L. Manor , Or Weis , Oded Ben David , Maciej Owsiany

Zero Trust Database Access Using OpenZiti and JDBC

Marcos Schejtman

AWS Security Hub (Panel)

Dinis Cruz , Ayse Vlok , Rakesh Elamaran , Ola Oladapo

CDC - Collective Defence Clusters

Dinis Cruz , Ante Gulam

DATA Driven approach on vulnerabilities Appsec vs Infra (Panel)

Francesco Cipollone , Jay Jacobs , John Kinsella , Mike Shema , Chris Madden , Marius Poskus

Ethical Hacking Challenges: Evaluating Practical Skills in Selection Processes (Panel

Dinis Cruz

Ideas for Graph DBs like Neo4j

Dinis Cruz , David Fauth , Dave Voutila , Irene Michlin

Open Security Summit Awards and plans for 2023

Dinis Cruz

17:00 - 19:00

WS-17-19

Scaling Your Security Program with Semgrep

Clint Gibler

18:00 - 19:00

WS-18-19

An AppSec guide to practical cryptography

Larkins Carvalho

AttackGen: Harnessing Language Models for Cybersecurity Simulations

Matthew Adams

Behaviour Change and Awareness

Tim Ward , Dinis Cruz , Danusia Rolewicz , Janet Bonar Law

Quantifying Usability In Security Designs and Risk Assessments

Dinis Cruz , Tariq Rashid , Izar Tarandach

The value of CTO/CISOs and how to make it work

Dinis Cruz , Mario Platt , Christofer Hoff

Threat Modelling Adoption in Disciplines Other Than Development

Marius Poskus , Dinis Cruz

Cyber Insurance - a deeper approach

Dinis Cruz , Abbas Haidar , Andrew Lea

Cybersecurity assessments: finding the way forward

Anna Lezhikova

How GenAI Agents will Dramatically Change our Industry

Dinis Cruz

How to Operate a Secure Kubernetes platform

Cristian Klein

Stop Committing Your Secrets - Git Hooks To The Rescue

Dwayne McDaniel

Why you don't need to be technical to get into security

Ashley Burke

ChatGPT and GenAI Privacy - Massive Uncertainty and Massive Opportunity

Dinis Cruz , Sarah Clarke

Crowdsourcing Security Talent

Dinis Cruz , Ante Gulam

Overview of the new DSOMM Application

Timo Pagel , Aryan Prasad

Security Design & Guidance at scale

Nielet Dmello

Threat Modeling Kata

Luis Servin

An Interactive Session on Teamwork and Collaboration Tools

Dr Daniel Shore , Zachary Broomfield

Championing Security: Scaling Security At Every Level

Dwayne McDaniel

Creating the GenAI Athena Bot from the theCyberboardroom.com

Dinis Cruz

Living off the Land & Fileless Attacks - Move Beyond the "Known Bad"

Celine Pypaert , Craig Gilliver , Abbas Haidar , Éireann Leverett , Dinis Cruz

Risk treatment planning in modern tech space (Panel)

Dinis Cruz , Marius Poskus , Izar Tarandach

Why Wardley Maps changed how I think

Dinis Cruz

Developer Driven Security in high-growth environments

Jakub Kaluzny

Protect Your Application, Not Just the Network. Add Zero Trust Superpowers to Your Critical Applications and Systems

Clint Dovholuk

18:00 - 19:30

WS-18-19+

Creating a Scalable API Test Framework using AWS and Elastic

Dinis Cruz

Jira Schemas and Workflows for AppSec and Risk Management

Dinis Cruz

Open source modern access control

Or Weis

Threat Models and Wardley Maps

Brook S.E. Schoenfield , Dave van Stein , Dinis Cruz , Izar Tarandach , Jakub Kaluzny , Krzysztof Daniel

Software Security and Threat Modelling

Brook S.E. Schoenfield

The Business case for Security Champions

Dinis Cruz , Olu

Using Elastic and Kibana for Scale and Security Visualisation

Dinis Cruz

Adversary Simulation: Close the Gaps in Your Security Posture

Don Murdoch

AMA with Brook Schoenfield

Brook S.E. Schoenfield , Izar Tarandach

OWASP Security Bot - Hypercharge your Cloud Automation

Dinis Cruz

Beat Alert Fatigue with Cyber Asset Relationship Graphs

Jasmine Henry

Learn Threat Modeling using the amazing OSS resources

Dinis Cruz

Technical Leadership and Influence

Brook S.E. Schoenfield

Hack your own app!

Akira Brand

Open Security Summit Membership Awards

Dinis Cruz

OSS - Celebrating the Community and plans for 2022

Dinis Cruz

Security on autonomous systems - a long way to go

Abbas Haidar

19:00 - 20:00

WS-19-20

Data Culture

Dinis Cruz , Tudor Girba , Tariq Rashid , Mark Craddock , Aleksandar Simovic

The Survival Guide to implementing Threat Modeling

Miguel Llamazares , Dave van Stein

Hacking OAuth: An Attacker's View of Your OAuth Flows

Sheshananda Reddy Kandula

WordPress: Hacking and Securing

Sam Stepanyan

AI and AppSec: are we finally on the verge of the big breakthrough?

Petra Vukmirovic

Hiring manager insights to secure your next security role/team member

Michael Meaney

How to become a cyber security professional? (i.e. where to start?)

Dinis Cruz

Successes and Failures at Security Training

Izar Tarandach , Chris Romeo , Dinis Cruz

18:00 - 19:30

WS-5

New OSS Projects

Dinis Cruz

OSS DevSecOps projet

Dinis Cruz

OSS Semgrep project

Dinis Cruz

OSS Threat Modeling and Moldable Development Projects

Dinis Cruz , Tudor Girba

OSS OWASP Project

Dinis Cruz

18:30 - 20:30

WS-6

Beginners Threat Modeling

James Bore

Playing at Security: Designing, building, and running tabletop scenarios for fail-safe incident handling and incident response training

James Bore

Schrems II - Transfer risk triage and other adventures in scoping

Sarah Clarke

Secure by Scenario - Data breach at the North Pole

James Bore

Threat Modeling Playbook

Sebastien Deleersnyder , Didar Gelici

Threats categorization, pitfalls, different ways of applying it in practise

James Bore

Encrypted Calendars - the need and consequences

Mark Potkewitz

Mitigating Risks Through Open-Source Bitcoin Tracing

Margaux Eckle

Refresher on Security Labels

Dinis Cruz , James Bore , David Clarke , Adam Leon Smith

Scaling Kubernetes - One Pod per file

Dinis Cruz

Schrems II - Finding workable solutions

Dinis Cruz , James Bore , David Clarke , Adam Leon Smith , Carey Lening , Mark Potkewitz

Using Kubernetes to create a scalable Security Proxy solution

Dinis Cruz , Didar Gelici , Ben Schofield , Nick Drage , Wallaby Curtis

AI ML European regulation

Jeff Jockisch , Adam Leon Smith , Federico Marengo

Modern Office Spaces

Dinis Cruz , Adam Leon Smith

Pyroscope internals and Using Pyroscope for real-time view of Cloud/Serverless Applications

Dmitry Filimonov

Secure by Scenario

James Bore , Didar Gelici

Testing Ephemeral Kubernetes Applications

Dinis Cruz

Threat Modeling for Schrems II

Dinis Cruz , James Bore , David Clarke

Threat Modeling Manifesto

Avi Douglen , Jonathan Marcil , Chris Romeo , Izar Tarandach , Kim Wuyts , Brook S.E. Schoenfield , Matthew Coles

Maturity Mapping: Contextualise change and learning

Chris McDermott

OWASP DSOMM Enhancement Workshop

Timo Pagel

Schrems II - Finding workable solutions

Dinis Cruz , James Bore , David Clarke , Adam Leon Smith , Carey Lening , Mark Potkewitz

Secure By Scenario

James Bore

Security Labels & Schrems II

Dinis Cruz , James Bore , David Clarke , Adam Leon Smith

Spreading security across the SDLC (with semgrep and other tools)

John Melton

Workshop on creating C# Tools using the Owasp O2 Platform

Dinis Cruz

Embrace Secure Defaults, Block Anti-patterns, and Kill Bug Classes with Semgrep

Clint Gibler

Owasp O2 Platform tools you can use today

Dinis Cruz

Secure By Scenario

Juan Spinel

Vendor Security Management using Jira

Abbas Haidar

Virtual Pub

Dinis Cruz , Didar Gelici

20:30 - 22:00

WS-7

Automating SOC2 using Jira

Dinis Cruz , Luke Robbertse , Abbas Haidar

AMA with Jeremiah Grossman

Dinis Cruz , Jeremiah Grossman

AMA with Jim Manico

Dinis Cruz , Jim Manico

The Modern Data Broker Landscape

Jeff Jockish

20:00 - 21:00

WS-20-21

DevSecOps beyond CI/CD pipelines

Anna Lezhikova

Doing Compliance Differently: Policies as Code, Evidence-based compliance through automation

Luis Servin

Secured Digital Workspace

Jude Pereira

AMA with Alyssa Miller

Izar Tarandach , Alyssa Miller

OWASP Top Ten Part 2

Jim Manico

AMA with Mark Curphey

Dinis Cruz , Mark Curphey

Jim and Dinis Talk Appsec

Dinis Cruz , Jim Manico

Purple Teaming with OWASP PurpleTeam

Kim Carter

AMA with Gary McGraw

Izar Tarandach , Gary McGraw

20:30 - 21:30

WS-20+-21+

Agile Threat Modeling with Open-Source Tools

Christian Schneider

AMA with Adam Shostack

Izar Tarandach , Adam Shostack

The OWASP Top Ten 2021 Release

Jim Manico