OWASP 2023 Global AppSec Washington, DC

Attending this event?

OWASP 2023 Global AppSec Washington, DC

5:00pm EDT

Women in AppSec Reception Marriott Marquis

6:30pm EDT

New Global AppSec Conference Attendee Icebreaker Reception Marriott Marquis

7:30am EDT

Speaker Ready Room

8:00am EDT

Breakfast Room: Liberty Ballroom Exhibitor Hall Room: Liberty Ballroom

9:00am EDT

Keynote Room: Independence Ballroom A-EBrook S.E. Schoenfield

10:00am EDT

AM Break Room: Liberty Ballroom

10:30am EDT

OWASP Mobile Application Security - MASVS and MASTG Room: MintCarlos Holguera • Sven Schleier ASVS Testing: You Keep Using Those Words Room: ArchivesShanni Prutchi Fixing Broken Access Control Room: Independence Ballroom A-EOmri Gazitt Bypass Binary Hardening Techniques Room: Capital-CongressOfri Ouzan Influencing Without Authority: The Foundations of a Successful Security Department of Yes Room: TreasuryTimothy Lisko • Ari Kalfus

11:00am EDT

It's the Low-Code / No-Code Capture the Flag!

11:10am EDT

OWASP API Security Room: MintErez Yalon

11:15am EDT

How to write a good CfT/CfP SubmissionIzar Tarandach

11:30am EDT

Discovering Shadow Vulnerabilities in Popular Open-Source Projects: A Journey Through Reverse-Fuzzing Room: ArchivesGuy Kaplan • Gal Elbaz DevSecOps Worst Practices Room: Independence Ballroom A-ETanya Janca Using an Application Performance Monitoring (APM) Environment for Security Insights Room: Capital-CongressRafael Ferreira Moving Forward By Looking Back: Data Collection and Analysis at OWASP Room: TreasuryBrian Glas

12:15pm EDT

Lunch Room: Liberty Ballroom

1:15pm EDT

OWASP Coraza WAF Room: MintJosé Carlos Chávez From Traditional to Intelligent Fuzzing: Embracing AI in Security Testing Room: ArchivesCory Murray • Jamal Webster Reflections on Trust in the Software Supply Chain Room: Independence Ballroom A-EJeremy Long AppSec Threats Deserve Their Own Incident Response Plan Room: Capital-CongressOmer Yaron “Shift Left” Isn’t What You Expected Room: TreasuryChen Gour-Arie

1:55pm EDT

OWASP pytm Room: MintIzar Tarandach

2:15pm EDT

Credential Sharing as a Service: the Dark Side of No Code Room: ArchivesMichael Bargury Metrics, metrics everywhere - from which ones I should be scared? Room: Independence Ballroom A-ESrdan Reljic • Maria Schwenger Fishing for Security: Reeling in Phishing Attacks Across a Global Organization Room: Capital-CongressYashvier Kosaraju Bootstrap your Software Security with OWASP SAMM 2.1 Room: TreasuryJohn Ellingsworth

2:35pm EDT

OWASP Top Ten for Kubernetes Room: MintJimmy Mesta

3:00pm EDT

PM Break Room: Liberty Ballroom

3:15pm EDT

OWASP Drill Room: MintCharles Givre

3:30pm EDT

Communicating Key AppSec Metrics: What and how to report software security up and down the management chain Room: TreasuryAnita D’Amico No Code you shall use, malware you shall get Room: Independence Ballroom A-EAmichai Shulman Obfuscation Nation: Detecting Malicious Dependencies at Scale with Static Analysis Room: Capital-CongressKurt Boberg

4:30pm EDT

Keynote 2 Room: Independence Ballroom A-EAlyssa Miller

5:30pm EDT

Addressing Supply Chain Issues or Application Security Specialists: The CREST OVS Business Accreditation Initiative, ASVS, and more! Room: MintAjoy Kumar • Tony UV • Tom Brenan OWASP Jeopardy Room: Independence Ballroom

6:30pm EDT

Networking Reception (costume optional) Room: Liberty Ballroom

7:30pm EDT

Leaders Meeting Room: Capital-Congress

7:30am EDT

Speaker Ready Room Room: Penn

8:00am EDT

Breakfast Room: Liberty Ballroom Exhibitor Hall Room: Liberty Ballroom

9:00am EDT

Keynote Room: Independence Ballroom A-EJackie Singh

10:00am EDT

AM Break Room: Liberty Ballroom

10:30am EDT

OWASP Low-Code No-Code Top 10 Marriott MarquisMichael Bargury Could Passwordless be Worse than Passwords?Aldo Salas Everyone Can Play! Building CTFs To Teach Non-Security Folks Room: Independence Ballroom A-EJoe Kuemerle Ignoring the hype: how to design your cloud architecture regardless of your cloud of choice Room: Capital-CongressNathan Case How to avoid potholes when scaling your Application Security programJeevan Singh

11:00am EDT

It's the Low-Code / No-Code Capture the Flag!

11:10am EDT

OWASP SAMM Marriott MarquisSebastien Deleersnyder

11:30am EDT

Refactoring Mobile App SecurityCarlos Holguera • Sven Schleier Using WebAssembly to run, extend, and secure your application! Room: Independence Ballroom A-ENiels Tanis Policy-as-Code: Across the Stack Room: Capital-CongressAbhay Bhargav Level Up Your Security Champions (and Your Program)Chuck Willis

12:15pm EDT

Lunch Room: Liberty Ballroom

1:15pm EDT

OWASP Defectdojo Marriott MarquisFred Blaise AI Red Teaming LLM: Past, Present, and FutureAlex Polyakov From SBOMs to F-Bombs: Vulnerability Analysis, SCA Tools, and False Positives & Negatives Room: Independence Ballroom A-EKevin Wall OSC&R - Open Software Supply Chain Attack Reference Room: Capital-CongressEyal Paz • Ronen Atias OpenCRE.org - Universal translator for securitySpyros Gasteratos • Rob van der Veer

1:55pm EDT

OWASP Developer Guide Marriott MarquisShruti Kulkarni • Andra Lezza

2:15pm EDT

Automated Security Testing with OWASP NettackerSam Stepanyan Cutting to the chase: Security Design and Guidance at scale Room: Independence Ballroom A-ENielet D'mello Zero Trust Threat Modeling Room: Capital-CongressChris Romeo The Problems with SBOMs — And How to Fix ThemCortez Frazier Jr

2:35pm EDT

OWASP Top 25 Parameters Marriott MarquisLütfü Mert Ceylan

3:00pm EDT

PM Break Room: Liberty Ballroom

3:15pm EDT

OWASP State of AppSec Survey Project Marriott MarquisDr. John DiLeo

3:30pm EDT

Everything-as-Code: Pushing the boundaries of SASTFrans van Buul Better Protect Sensitive Data in the Cloud with Client-Side Application Layer Encryption Room: Independence Ballroom A-EWias Issa Scaling Content Security Policy: Enterprise Compliance and Third Party Resource Management Room: Capital-CongressJon Kulisz • Piyush Pattanayak The State of Secure DevOps - Security enables VelocityMichele Chubirka • Nathen Harvey

4:25pm EDT

Keynote 2 Room: Independence Ballroom A-ELisa Plaggemier

5:15pm EDT

Closing Ceremony and Raffle Room: Independence Ballroom A-E

8:00am EDT

SAMM User DaySebastien Deleersnyder

9:00am EDT

1-Day Training:Application Security Testing: Verifying the Right Things Were Done Right Marriott MarquisDr. John DiLeo 2 Day Training:Adam Shostack's Threat Modeling Intensive Marriott MarquisAdam Shostack 2 Day Training:Advanced Whiteboard hacking – aka hands-on Threat ModelingSebastien Deleersnyder 2 Day Training:AppSec Automation Masterclass (AVAILABLE IN PERSON OR VIRTUALLY) Marriott MarquisAbhay Bhargav 2-Day Training: Mobile Application Security Testing Guide (MASTG) - Hands-On (AVAILABLE IN PERSON OR VIRTUALLY) Room: Capitol HillSven Schleier 3 Day Training -Web Application Security Essentials Marriott MarquisFabio Cerullo 3 Day Training: Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors (AVAILABLE IN PERSON OR VIRTUALLY) Marriott MarquisAbraham Aranguren • Ashwin Shenoi

10:00am EDT

AM Break Marriott Marquis

12:30pm EDT

Lunch Marriott Marquis

3:00pm EDT

PM Break Marriott Marquis

8:00am EDT

Breakfast Marriott Marquis

9:00am EDT

1 Day Training: Container and Kubernetes Security 101 TrainingVandana Verma 2 Day Training:Adam Shostack's Threat Modeling Intensive Marriott MarquisAdam Shostack 2 Day Training:Advanced Whiteboard hacking – aka hands-on Threat ModelingSebastien Deleersnyder 2 Day Training:AppSec Automation Masterclass (AVAILABLE IN PERSON OR VIRTUALLY) Marriott MarquisAbhay Bhargav 2-Day Training: Mobile Application Security Testing Guide (MASTG) - Hands-On (AVAILABLE IN PERSON OR VIRTUALLY) Room: Capitol HillSven Schleier 3 Day Training -Web Application Security Essentials Marriott MarquisFabio Cerullo 3 Day Training: Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors (AVAILABLE IN PERSON OR VIRTUALLY) Marriott MarquisAbraham Aranguren • Ashwin Shenoi

10:00am EDT

AM Break Marriott Marquis

12:30pm EDT

Lunch Marriott Marquis

3:00pm EDT

PM Break Marriott Marquis

8:00am EDT

Breakfast Marriott Marquis

9:00am EDT

3 Day Training -Web Application Security Essentials Marriott MarquisFabio Cerullo 3 Day Training: Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors (AVAILABLE IN PERSON OR VIRTUALLY) Marriott Marquis

10:00am EDT

AM Break Marriott Marquis

12:30pm EDT

Lunch Marriott Marquis

3:00pm EDT

PM Break Marriott Marquis