owasp london chapter meeting 18th may 2017 · 2017. 5. 18. · • manchester • newcastle •...

OWASPLondonChapterMeeting18thMay2017

LondonChapter

ChapterLeaders:• SamStepanyan(@securestep9)

• SherifMansour(@kerberosmansour) KeepingInTouch:➤ JointheOWASPLondonmailinglist➤ Follow@OWASPLondononTwitter ➤ “Like”OWASPLondononFacebook➤ SubscribetoOWASPLondonChannelonYouTube➤ Chatwith#chapter-londonteamowasp.Slack.com

LiveStream

WeareLIVESTREAMINGTHISEVENT:

facebook.com/OWASPLondon

Agenda

• Networking,pizza&drinks• WelcomeandOWASPUpdate-SamStepanyan&SherifMansour

• ThreatModelingAgainstPaymentSystems-Dr.GrigoriosFragkos

• LightningTalk1:OWASPSummit&OWASPTop102017Changes-DinisCruz ------------break-------------------------------

• UnsafeDeserializationAttacksInJavaandANewApproachToProtectTheJVM-ApostolosGiannakidis

• LightningTalk2:Securitysolutionsfordeveloperswhohavenotimeforsecurity-EdwinAldridge

• Networking&Beer-AllBarOne

OWASP

• WeareaGlobalnot-for-profitcharitableorganisation

• Focusedonimprovingthesecurityofsoftware

• Vendor-NeutralCommunity

• CollectiveWisdomoftheBestMindsinApplicationSecurityWorldwide

• Wecollaborativelydevelopandprovidefreetools,guidance,standards

• Allmeetingsarefreetoattend(*freebeerincluded)

Worldwide

• Over160localChaptersaroundtheworld

UKChapters

• Belfast

• Birmingham

• Bristol• Cambridge

• Leeds

• London• Manchester

• Newcastle• RoyalHolloway(inactive)• Scotland

• Sheffield• Suffolk

BecomeaMember

WeareallVOLUNTEERS!(45,000worldwide)

Membership

$50/year!

MemberBenefits

➡SupportEthics&PrinciplesoftheOWASPFoundation

➡UnderscoreyourawarenessofApplicationSecurity

➡ Increaseyourvalue,knowledgeandexpandyourskills,networkwithprofessionalswhosharesimilarconcerns,interestsandgoals,collaborateonprojects

➡GetexclusivediscountsonAppSecEU/USAandmanyotherGlobalCyberSecurityConferences&events

➡DonatetoyourlocalChapterandProjects

➡Getan@owasp.orgemailaddress

➡VOTEonissuesthatshapedirectionofOWASPcommunity

$50/year!

OWASPMember

Ifyouareamemberalready-collectthisstickerfromtheChapterLeaders

OWASPCorporateMembers

PremierMembers

Premiermembers(donate$20,000/year):

LondonChapterSupporters

OWASPBooks

15

StandardsandGuidelines

OWASPTools-ZAP

FREEeBook

https://bit.ly/freenodejsbook

EssentialNode.jsSecurityforExpressJSWebApplications

Hands-onandabundantwithsourcecodeforapracticalguidetoSecuringNode.jswebapplications.

GoSecureCodingPracticesFreeeBook

GoLanguage- WebApplicationSecureCodingPractices

* Avoidcommonmistakes* Hands-ondetailon…* howtocodeinGosecurely* DonatedbyCheckMarx* HostedonGitBook* Youcancontribute,notjustread

https://bit.ly/go-scp

AppSecEurope2017

8-12May2017,BelfastNorthernIreland

OWASPJuiceShop

*juice-shopv3.1.0*juice-shop-ctfv1.1.0

OWASPThreatDragon

OWASPTop102017RC

Pleasesendcomments: OWASP-TopTen@lists.owasp.org

CommentsrecommendingchangestotheitemslistedintheTop10shouldincludeacompletesuggestedlistof10items,alongwitharationaleforanychanges

OWASPSummit2017

BSIDESLondon

BSidesLondon2017BiggestCommunity-Driven InfoSecConference

07.June.2017

ILECConferenceCentre47LillieRoadLondonSW61UD

WEWILLBETHERE!

BSIDESAthens

Saturday,24thJune2017

InfoSecEurope2017

AppSecUSA2017

AllDayDevOps

JoinusonOctober24,2017

KeynoteIntro

• Beforeintroducingthekeynotespeaker,let’sremembersomevulnerabilitieswithownlogos..

Logos

@drgfragkos

DrGrigorios“Greg”Fragkos

TalkTime!

• DrGrigorios“Greg”Fragkos

• DinisCruz

• ApostolosGiannakidis

• EdwinAldridge

StayinginTouchOWASPLondon

OWASPLondonProvisionalDatesoffuturemeetings:

27thJuly2017

“Like”usonFacebookhttps://www.facebook.com/OWASPLondon

WatchusonYouTube:YouTube.com/OWASPLondon

VisitOWASPLondonChapterwebpagehttps://www.owasp.org/index.php/London

JoinTheOWASPLondonMailingList:http://lists.owasp.org/mailman/listinfo/owasp-london

Slack:owasp.slack.com#chapter-london

FollowusonTwitter@owasplondon

PresentYourTalk

CallForSpeakersForFutureEvents

DoyouhaveagreatApplicationSecurityRelatedTalk?

3Tracks:

•Breakers•Defenders•Builders

Submittheabstractofyourtalkandyourbioto:

owasplondon@owasp.org

ThankYou!

Speakers:

• DrGrigoriosFragkos• DinisCruz• ApostolosGiannakidis• EdwinAldridge

AllslideswillbepublishedonOWASP.ORGandvideorecordingswillbeonOWASPLondonYouTubechannelinafewdays

Hostsforthisevent• WorldPay

• Attendees(you!)

PubTime!

• NetworkingandDrinksat:

• AllBarOne:103CannonStreet

• TheCannickTapps