OWASP Global AppSec DC 2019
2019-09-09..2019-09-13
Washington, United States
who it's for
application security engineers, security engineers, devops engineers, engineering managers, security architects, talent acquisition teams, diversity and inclusion leads
topics
crown-jewel data identification; API threat modeling; attribute based access control; TLS for services; dependency tree management; Docker and Kubernetes hardening; CI/CD pipeline security tests; software composition analysis; deception and honeypots; psychological safety and hiring
| title | author | length |
|---|---|---|
| Diversity And Inclusion - Not Just A Gender Gap | Vandana Verma Sehgal | 51m |
Material argues diversity beyond gender and gives concrete actions and outcomes: revived InfosecGirls and OWASP Bangalore chapters, runs free trainings… | ||
| Opening Remarks | Ofer Maor, Richard Greenberg, Mike McCamon, Ben Pick | 10m |
OWASP states nearly 20 years of activity with over five million visitors to its site and almost 50,000 participants in chapters and events, runs about 130… | ||
| Applying Security Engineering Principles to Complex Composite Systems | Neal Ziring | 01h 00m |
Engineers get a checklist of 10 principles that drive concrete choices: identify crown‑jewel data, model attacks, assume attackers know internal APIs, and plan… | ||
| Talent matters. You matter | Caroline Wong | 59m |
Claim: the internet wasn’t built for today’s apps, automation isn’t enough, and the world needs roughly 3 million more security pros; 70% of defenders report… | ||
| A DevSecOps Tale of Business, Engineering, and People | James Wickett | 53m |
A historical failure (two trains, ~40,000 spectators, boilers exploding) frames a concrete claim: treat security as engineering practice with measurable… | ||
| nothing matches | ||