OWASP 2024 Global AppSec San Francisco

Attending this event?

OWASP 2024 Global AppSec San Francisco

THE MUST ATTEND EVENT FOR CYBERSECURITY PROFESSIONALS

9:00am PDT

3 Day Training: Attacking the Application Supply Chain Room: Golden Gate (Bay Level)Vishnu Prasad 3 Day Training: Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors Room: Seacliff A (Bay level)Abraham Aranguren

9:00am PDT

2-Day Training: OWASP in Action: ASPM with OWASP Projects Room: Regency B (Street Level)Matt Tesauro • Harold Blankenship 3 Day Training: Attacking the Application Supply Chain Room: Golden Gate (Bay Level)Vishnu Prasad 3 Day Training: Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors Room: Seacliff A (Bay level)Abraham Aranguren

9:00am PDT

2-Day Training: OWASP in Action: ASPM with OWASP Projects Room: Regency B (Street Level)Harold Blankenship • Matt Tesauro 3 Day Training: Attacking the Application Supply Chain Room: Golden Gate (Bay Level)Vishnu Prasad 3 Day Training: Hacking Modern Web & Desktop apps: Master the Future of Attack Vectors Room: Seacliff A (Bay level)Abraham Aranguren

10:30am PDT

OWASP Mobile Application Security (MAS) Room: Bayview A (Bay Level)Sven Schleier • Carlos Holguera Striding Your Way to LINDDUN: Threat Modeling for Privacy Room: Seacliff ABShanni Prutchi • Chris Bush 5 Steps to VEX Success: Managing the End-to-End Workflow Room: Seacliff CDCortez Frazier Jr

11:00am PDT

OWASP DevSecOps Maturity Model (DSOMM) Room: Bayview A (Bay Level)Timo Pagel

11:30am PDT

GraphQL Exploitation: Secondary Context Attacks and Business Logic Vulnerabilities Room: Grand BallroomWillis Vandevanter Under the Radar: How we found 0-days in the Build Pipeline of OSS Packages Room: Seacliff ABFrançois Proulx

1:15pm PDT

O My Data: OData Injection attack and other injections in Microsoft Power Platform and UiPath Room: Grand BallroomAmichai Shulman Don’t Make This Mistake: Painful Learnings of Applying AI in Security Room: Seacliff ABEitan Worcel Businesses Run On Risk And Debt: Why Communicating Security Risk Is Hard Room: Bayview B (Bay Level)Dwayne McDaniel

2:15pm PDT

Self-Discovering API Key Permissions and Resources Room: Seacliff CDJoseph Leon • Dylan Ayrey Who Hurt You? Earning the trust of developers Room: Bayview BTanya Janca

3:30pm PDT

Web Security Experts: Are you overlooking WebRTC vulnerabilities? Room: Grand BallroomSandro Gauci

10:30am PDT

Automatic application hardening by leveraging container runtime behavior analysis during CI processes Room: Seacliff CDBen Hirschberg

11:00am PDT

OWASP dep-scan Room: Bayview APrabhu Subramanian

11:30am PDT

Hidden Chains: Revealing High-Impact Bugs from Bounty submissions Room: Grand Ballroomvinay prabhushankar • Murali Vadakke Puthanveetil Millions Of Public Certificates Are Reusing Old Private Keys Room: Seacliff ABJoseph Leon Practical Software Supply Chain Security Solutions Room: Seacliff CDRobert Marion The Path to Influence: How Three Threat Modelers Can Influence an Entire Organization Room: Grand BallroomLéandre Forget-Besnard • Laurent Bouchard

1:15pm PDT

Slack’s Vulnerability Aggregator: How we built a platform to manage vulnerabilities at scale Room: Seacliff ABAtul Gaikwad • Nicholas Lin AI Under the Hood: Unmasking Hidden Threats Room: Seacliff CDDr. Nitish M. Uplavikar Learning from "edge of tomorrow" to build an effective security design review program Room: Bayview BFelix Matenaar • Ari Fay

2:15pm PDT

Kernel Alchemy: Crafting Mobile Kernel Code to Evade Modern RASP Protections Room: Grand BallroomSubho Halder Escaping Vulnerability Hell: Bridging the Gap Between Developers and Security Teams Room: Seacliff ABAhmad Sadeddin Learning from Past Security Breaches: Strengthening AppSec Efforts and Focus Room: Seacliff CDJon McCoy

3:15pm PDT

OWASP JuiceShop Room: Bayview ABjoern Kimminich

3:30pm PDT

Modernizing the Application Penetration Engagement and Reporting Lifecycle Room: Grand BallroomRyan Armstrong Threat Modeling Large Scale K8s Based Platform Room: Seacliff CDAnurag Dwivedy • Brian "Mello" Kirouac