OPENING KEYNOTE: OWASP as a Secure Supply Chain Force Multiplier
With Andrew van der Stock
Executive Director at OWASP Foundation
2022 AppSec Days
Recorded Presentations
Falsifying Traffic Data to Defraud Auction Marketplaces
By Devin Gaffney
Founder of International Persuasion Machines
Common Vulnerabilities in Modern Auth Implementations
By Krishna Chaitanya Telikicherla
Senior Security Engineer at Microsoft
Have You ZAP’ed a Vendor Today? A case for responsible disclosure in vendor risk assessments
By Michael Swinarski
Deputy CISO at CorVel Corporation
Scaling Up the Security Posture in a Hyper Growth Environment and Daunting Talent Gap
By Chitra Dharmarajan
Senior Director, Security & Privacy Engineering at Auth0
Living Threat Models Are Better Than Dead Threat Models
By John L. Whiteman and John S. Andersen
Security Researcher at Intel Corporation
Redefining Threat Modeling: Security Team Goes on Vacation
By Jeevan Singh
Senior Manager and Product Security at Twilio
Closing Remarks
By AppSec Days Pacific Northwest Security Conference Organizers
Networking
Everyone!
How Automating CVE Analysis Led to Dozens of New DLL Hijacking Flaws
By Tim Morgan
Founder and Chief Technology Officer at DeepSurface Security
Build More Secure Apps by Harnessing the Power of OWASP SKF & ASVS on Kubernetes
By Farshad Abasi and Kurt Hundeck
Founder and Chief Security Officer at Forward Security
Format Preserving Encryption: How to Encrypt Sensitive Data Without Restructuring Your Database
By Gary Schneir
VP Software Architecture at Ubiq Security
Peeling the Onion: Making Sense of the Layers of API Security
By Matt Tesauro
Distinguished Engineer at Noname Security
The 7 deadly sins of appsec red teams and how to avoid them
By Dana Epp
Lead Security Researcher at Vulscan Digital Security
Networking
Everyone!