owasp london chapter meeting 18th may 2017 · 2017. 5. 18. · • manchester • newcastle •...
TRANSCRIPT
OWASPLondonChapterMeeting18thMay2017
LondonChapter
ChapterLeaders:• SamStepanyan(@securestep9)
• SherifMansour(@kerberosmansour) KeepingInTouch:➤ JointheOWASPLondonmailinglist➤ Follow@OWASPLondononTwitter ➤ “Like”OWASPLondononFacebook➤ SubscribetoOWASPLondonChannelonYouTube➤ Chatwith#chapter-londonteamowasp.Slack.com
Agenda
• Networking,pizza&drinks• WelcomeandOWASPUpdate-SamStepanyan&SherifMansour
• ThreatModelingAgainstPaymentSystems-Dr.GrigoriosFragkos
• LightningTalk1:OWASPSummit&OWASPTop102017Changes-DinisCruz ------------break-------------------------------
• UnsafeDeserializationAttacksInJavaandANewApproachToProtectTheJVM-ApostolosGiannakidis
• LightningTalk2:Securitysolutionsfordeveloperswhohavenotimeforsecurity-EdwinAldridge
• Networking&Beer-AllBarOne
OWASP
• WeareaGlobalnot-for-profitcharitableorganisation
• Focusedonimprovingthesecurityofsoftware
• Vendor-NeutralCommunity
• CollectiveWisdomoftheBestMindsinApplicationSecurityWorldwide
• Wecollaborativelydevelopandprovidefreetools,guidance,standards
• Allmeetingsarefreetoattend(*freebeerincluded)
Worldwide
• Over160localChaptersaroundtheworld
UKChapters
• Belfast
• Birmingham
• Bristol• Cambridge
• Leeds
• London• Manchester
• Newcastle• RoyalHolloway(inactive)• Scotland
• Sheffield• Suffolk
BecomeaMember
WeareallVOLUNTEERS!(45,000worldwide)
Membership
$50/year!
MemberBenefits
➡SupportEthics&PrinciplesoftheOWASPFoundation
➡UnderscoreyourawarenessofApplicationSecurity
➡ Increaseyourvalue,knowledgeandexpandyourskills,networkwithprofessionalswhosharesimilarconcerns,interestsandgoals,collaborateonprojects
➡GetexclusivediscountsonAppSecEU/USAandmanyotherGlobalCyberSecurityConferences&events
➡DonatetoyourlocalChapterandProjects
➡VOTEonissuesthatshapedirectionofOWASPcommunity
$50/year!
OWASPMember
Ifyouareamemberalready-collectthisstickerfromtheChapterLeaders
OWASPCorporateMembers
PremierMembers
Premiermembers(donate$20,000/year):
LondonChapterSupporters
StandardsandGuidelines
OWASPTools-ZAP
FREEeBook
https://bit.ly/freenodejsbook
EssentialNode.jsSecurityforExpressJSWebApplications
Hands-onandabundantwithsourcecodeforapracticalguidetoSecuringNode.jswebapplications.
GoSecureCodingPracticesFreeeBook
GoLanguage- WebApplicationSecureCodingPractices
* Avoidcommonmistakes* Hands-ondetailon…* howtocodeinGosecurely* DonatedbyCheckMarx* HostedonGitBook* Youcancontribute,notjustread
https://bit.ly/go-scp
AppSecEurope2017
8-12May2017,BelfastNorthernIreland
OWASPJuiceShop
*juice-shopv3.1.0*juice-shop-ctfv1.1.0
OWASPThreatDragon
OWASPTop102017RC
Pleasesendcomments: [email protected]
CommentsrecommendingchangestotheitemslistedintheTop10shouldincludeacompletesuggestedlistof10items,alongwitharationaleforanychanges
OWASPSummit2017
BSIDESLondon
BSidesLondon2017BiggestCommunity-Driven InfoSecConference
07.June.2017
ILECConferenceCentre47LillieRoadLondonSW61UD
WEWILLBETHERE!
BSIDESAthens
Saturday,24thJune2017
InfoSecEurope2017
AppSecUSA2017
AllDayDevOps
JoinusonOctober24,2017
KeynoteIntro
• Beforeintroducingthekeynotespeaker,let’sremembersomevulnerabilitieswithownlogos..
Logos
@drgfragkos
DrGrigorios“Greg”Fragkos
TalkTime!
• DrGrigorios“Greg”Fragkos
• DinisCruz
• ApostolosGiannakidis
• EdwinAldridge
StayinginTouchOWASPLondon
OWASPLondonProvisionalDatesoffuturemeetings:
27thJuly2017
“Like”usonFacebookhttps://www.facebook.com/OWASPLondon
WatchusonYouTube:YouTube.com/OWASPLondon
VisitOWASPLondonChapterwebpagehttps://www.owasp.org/index.php/London
JoinTheOWASPLondonMailingList:http://lists.owasp.org/mailman/listinfo/owasp-london
Slack:owasp.slack.com#chapter-london
FollowusonTwitter@owasplondon
PresentYourTalk
CallForSpeakersForFutureEvents
DoyouhaveagreatApplicationSecurityRelatedTalk?
3Tracks:
•Breakers•Defenders•Builders
Submittheabstractofyourtalkandyourbioto:
ThankYou!
Speakers:
• DrGrigoriosFragkos• DinisCruz• ApostolosGiannakidis• EdwinAldridge
AllslideswillbepublishedonOWASP.ORGandvideorecordingswillbeonOWASPLondonYouTubechannelinafewdays
Hostsforthisevent• WorldPay
• Attendees(you!)
PubTime!
• NetworkingandDrinksat:
• AllBarOne:103CannonStreet
• TheCannickTapps