Loading…
avatar for Martín V.

Martín V.

C13 Security, LLC
Founder, Principal Application Security Consultant
Santa Barbara, CA
Monday, January 23
 

6:30pm PST

Riot Games Security Meetup Riot Games
 
Tuesday, January 24
 

7:30am PST

Registration, Breakfast, and Vendor Expo TBA

9:00am PST

Welcome Address Sand and Sea RoomEdward Bonver • Richard Greenberg

9:20am PST

Oscar Whiskey Alpha September Papa Sand and Sea Room

9:40am PST

Opening Keynote: Scaling a Software Security Initiative: Lessons from the BSIMM Sand and Sea RoomGary McGraw, Ph.D.

10:30am PST

Break and Vendor Expo Annenberg Community Beach House

11:00am PST

The Physical Web, interact with anything Garden Terrace RoomScott Jenson Threat Modeling for Mobile Marion Davies Guest HouseAmit Sethi

12:00pm PST

Twubhubbook: like an appsec program, but for startups Marion Davies Guest HouseBrent Johnson • Neil Matatall

12:50pm PST

Lunch and Vendor Expo Annenberg Community Beach House

2:30pm PST

Monitoring Application Attack Surface to Integrate Security into DevOps Pipelines Garden Terrace RoomDan Cornell Dissecting Browser Privacy Sand and Sea RoomYan

3:30pm PST

A Hybrid Approach for Web App Penetration Testing Marion Davies Guest HouseDavid Caissy Java LangSec: New Security Controls in Java 8 and 9 Terrace LoungeJim Manico

4:20pm PST

Break and Vendor Expo Annenberg Community Beach House

4:50pm PST

Essential TLS Hardening for Better Web Security Garden Terrace RoomJustin Mayer

5:40pm PST

Opening Reception Marion Davies Guest House
 
Wednesday, January 25
 

8:00am PST

Registration, Breakfast, and Vendor Expo TBA

9:00am PST

Opening Remarks Sand and Sea RoomRichard Greenberg

9:05am PST

Diamond Sponsor Greeting Sand and Sea RoomShapeSecurity

9:10am PST

Keynote: Machine Learning — Cybersecurity Boon or Boondoggle Sand and Sea Room​Dr. Zulfikar Ramzan

10:00am PST

Break and Vendor Expo Annenberg Community Beach House

10:30am PST

Serverless! The holy grail of security operations (?) Marion Davies Guest HouseDavid Cuadrado • Santiago Kantorowicz DASTProxy: Don’t let your automated security testing program stall on crawl. Instead focus on business context. Terrace LoungeSrinivasa Rao Chirathanagandla • Kiran Sharadkumar Shirali

11:30am PST

Want to be secure? Eliminate passwords. If you don't have a password, it can't be stolen! Sand and Sea RoomJack Bicer HSTS, TLS, HPKP, CSP: putting them all together to move to HTTPS Terrace LoungeSun Hwan Kim • Julien Sobrier

12:20pm PST

Lunch and Vendor Expo Annenberg Community Beach House

2:00pm PST

A Case for Integrity: JavaScript Apps Should Have it Too Garden Terrace RoomPedro Fortuna CSP: The Good, the Bad and the Ugly Terrace LoungeEli Nesterov

3:00pm PST

Life of a Password Garden Terrace RoomArvind Mani OCSP Stapling in the Wild Sand and Sea RoomDevdatta Akhawe • Emily Stark "Stealth" Authentication - how to not leak information to hackers in web application authentication Terrace LoungeMarc Bütikofer

3:50pm PST

Break and Vendor Expo Annenberg Community Beach House

4:20pm PST

Closing Keynote: Hide and Seek just got harder, the anatomy of modern deceptive technologies Sand and Sea RoomChris Roberts

5:10pm PST

Raffle Prize Drawings Sand and Sea Room