OWASP 2024 Global AppSec San Francisco

In this combined User Day, you will learn, share, and have the chance to discuss with peers, contributors, and project leaders about two of OWASP’s major projects: DevSecOps Maturity Model (DSOMM) and Juice Shop!

Morning Session | Juice Shop User Day 2024
OWASP Juice Shop is - even after 10 years - the most modern and sophisticated insecure web application. It encompasses vulnerabilities from the entire OWASP Top Ten and many other security flaws, packaged in a realistic and fully functional web shop. We will offer the following sessions about Juice Shop:

* Beginner-friendly introduction session to the project, its features, and its use case
* Fun live demo of a very practical XSS exploit
* Introduction of a way to run Juice Shop conveniently from an on-brand LEGO brick tower filled with Raspberry Pi's
* Fully hosted just-for-fun (and bragging rights) Capture the Flag event

As the session closes is the perfect time to ask us anything you're curious about! Feel free to chat with us throughout the lunch break too. We're here to help!

In the afternoon, join us for...

Afternoon Session | Elevate Your DevSecOps: DSOMM User Day 2024

The OWASP DSOMM User Day is an event centered on application security programs and related topics for startups and enterprises. It features a talk on building and optimizing AppSec programs, emphasizing custom organizational maturity models. The event includes a discussion on AppSec program experiences, as well as a presentation on using OWASP secureCodeBox for automating dynamic scans. Two workshops are offered: one on utilizing the DSOMM application to customize and distribute AppSec programs, and another on the Application and Vulnerability Maturity Model. Throughout the event, there's a focus on practical implementation, automation, and maturity models in the context of application security.

Details: https://dsomm.owasp.org/userday