Open Tech Calendar

OWASP London Chapter In-Person Meetup

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan
Welcome and a brief update on OWASP Projects & Conferences

"Introduction to OWASP depscan - the SCA tool that is built to forget" - Prabhu Subramanian

Software composition analysis tools, both commercial and open source, have some problems. They are too noisy, constantly distracting developers and AppSec with needless pull requests and non-actionable alerts. In this talk, we introduce OWASP depscan, the SCA tool that is purpose-built to cut the noise, make security actionable, and help dev teams forget the tool even exists in their CI pipeline.

"ChatGPT Tutorial for Developers - 10X your AWS Security Skills" - Ashish Rajan

This talk will go through the foundational cloud security components of deploying AWS with security at scale traditionally. Then we will attempt the same with ChatGPT for those who are perhaps new to AWS but would like the new way of learning cloud security

SPEAKERS:

Prabhu Subramanian (@_prbh)

Prabhu Subramanian is the author and OWASP leader behind projects such as CycloneDX Generator (cdxgen) and depscan. He specializes in Supply Chain Security and offers consultancy to global clients via his company, AppThreat Ltd.

Ashish Rajan (@hashishrajan)

Ashish Rajan is the host of the wildly popular Cloud Security Podcast, a CISO, CyberSecurity Influencer, a SANS Trainer for Cloud Security and an outspoken opinion leader on all things Cloud Security & DevSecOps.
He is a frequent contributor on topics related to public cloud transformation, DevSecOps, Future Tech and the associated security challenges for practitioners and CISOs.

https://www.meetup.com/owasp-london/events/297245227/

https://www.meetup.com/owasp-london/events/297245227/

Thu 16th Nov 2023 6:00pm (Europe/London)

Thu 16th Nov 2023 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

https://owasp.org/www-policy/operational/code-of-conduct

OWASP London Chapter In-Person Meetup

The next OWASP London Chapter in-person meetup will take place on Thursday 3rd August 2023 (6:00pm doors, 6:30pm talks kick off) at Plexal, Press Centre, Here East (Olympic Park Stratford).

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan

Welcome and a brief update on OWASP Projects & Conferences

Talk 1: "DevSecOps Maturity Model (DSOMM): From Theory to Enforcement " - Raz Probstein

The OWASP DevSecOps Maturity Model provides an excellent framework for companies looking to truly apply security in a cloud native and fast-paced engineering world. However, like all things Dev+Ops related, whatever isn't automated is much more difficult to apply to our systems. We'll show you how.

Talk 2: "Doing More with Less: Practical Applications for Generative AI in Cybersecurity" - Matt Adams

This talk will demonstrate how generative AI can act as a productivity multiplier for cybersecurity teams, enabling them to do more high-value work with the same resources. Through live demos, attendees will see AI-powered tools that can automatically generate threat models, create security awareness materials, and automate security scanning and reporting - saving security teams valuable time. Attendees will come away with an understanding of how generative AI can be applied to help cybersecurity teams “do more with less” and elevate their capabilities.

SPEAKERS
Raz Probstein (@RazProbstein), Solution Engineer, Jit.io

Raz Probstein comes with years of experience is both leadership and technology, having served not only as Young Ambassador to the state of Israel, as well as headhunted and selected as Young Researcher at the prestigious Weizmann Institute for multi-disciplinary scientific research. Today she serves as a Fullstack Engineer at Jit, coming to the role with years of experience in a diversity of programming languages from Python, to Javascript and C/C#, from the elite Israel Defense Forces(IDF) Unit 81 - where she was not only one of a handful of women serving in a cybersecurity role, she also mentored women to help drive more gender diversity in the unit. Today she is studying Biotechnology at the Open University, and is passionate about building cloud native security tooling developers will love.

Matt Adams (@mattrwa), Security Architect, Santander UK

Matt is a highly experienced Security Architect with nearly 20 years of professional experience in the field of cybersecurity. He has worked with renowned organisations such as Costa Coffee and Santander UK, where he has led security architecture and engineering teams, and played a crucial role in defining global information security strategies. By drawing on his extensive knowledge in areas such as Security Architecture, Cloud Security, and Generative AI, Matt brings insightful perspectives on emerging technologies and their potential to reshape the cybersecurity landscape.

TICKETS
This event is free to attend for both members and non-members of OWASP and is open to anyone interested in web application and cyber security. Please note that you MUST book your place to be admitted to the event by the building security - your name will be checked against the guest list.

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-in-person-tickets-679671735457

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-in-person-tickets-679671735457

Thu 3rd Aug 2023 6:00pm (Europe/London)

Thu 3rd Aug 2023 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

https://owasp.org/www-policy/operational/code-of-conduct

OWASP London Chapter Meetup [In-Person] at Amazon London offices

This event is kindly sponsored and hosted by Amazon. There is limited seating available for in-person attendees. Registration required. Please note that this event will be live-streamed on YouTube for the online audience. Recordings will be available on OWASP London YouTube channel: https://www.youtube.com/OWASPLondon

Venue Location: 1, Principal Place, Amazon LHR16, Worship St, London EC2A 2FA

Nearest Tubes: Liverpool Street - 6 min walk, Shoreditch High Street Overground 7 min walk

Doors Open at 6pm for registration, food, drinks and networking. The talks start at 6:30pm (we start on time).

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan

Welcome and a brief update on OWASP Projects & Conferences

Talk 1: "Security Chaos Engineering: When and How You Should Break Your System" - Anais Urlichs

The real cost of misconfiguration for businesses has been set to several trillion over the past years. These costs are the result of misconfiguration in infrastructure and workloads. One way to proactively identify misconfiguration is through security scanning. The scan results provide us with insights into the security posture of our services over time. However, these scanners treat our resources as static and evaluate misconfiguration only in single instances. To assess the potential impact of misconfiguration in our production environment, we need additional tools. In this talk, we will look at ways Chaos Engineering and Security Experimentation can help us minimise the potential damage of misconfiguration. Chaos Engineering is the process of intentionally introducing fault into a system to test its resilience to failure. Anais will walk you through the principles of Security Chaos Engineering and how it can be used to proactively identify misconfiguration and make our deployment pipeline and services more robust.

Talk 2: "It’s Not a Bug It’s Emergent Behaviour - Generative AI, Its Cybersecurity Risks and Benefits" - Sherif Mansour

A curated talk on generative AI, where Sherif will present his research findings beginning with an overview of the technology, then discuss its current technical risks, and explore its promising security use cases without making grand claims. Additionally, this talk dive into design considerations when developing web applications utilising generative AI. To conclude, Sherif will introduce open-source software announced during the talk, encouraging attendees to use and investigate them at their own discretion.

SPEAKERS
Anaïs Urlichs (@urlichsanais)

Anaïs Urlichs is a Developer Advocate at Aqua Security, where she contributes to Aqua’s cloud native open source projects. When she is not advocating DevOps best practices, she runs her own YouTube Channel centered around cloud native technologies. Before joining Aqua, Anais worked as SRE at Civo, a cloud native service provider, where she worked on infrastructure for hundreds of tenant clusters. As OpenUK ambassador, her passion lies in making tools and platforms more accessible to developers and community members.

Sherif Mansour (@kerberosmansour)

Sherif Mansour is the global director of information security at JustEat Takeaway.com and has been working in the field of information security for 19 years. He was the OWASP chairman and sat on of the OWASP foundations' board for four years. He was also one of the founding governing board members for the OpenSSF Foundation which he represented the OWASP Foundation. Sherif contributed to several OWASP projects and was one the main authors of the CIS Benchmark for Tomcat 7/8. As a security researcher he has disclosed vulnerabilities in Microsoft, Oracle, SAP and SiteSpect products.

TICKETS
This event is free to attend for both members and non-members of OWASP and is open to anyone interested in web application and cyber security. Please note that you MUST book your place to be admitted to the event by the building security - your name will be checked against the guest list. Please bring a Photo ID as this is the Amazon's building security requirement.

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-in-person-tickets-634995969037

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-in-person-tickets-634995969037

Tue 30th May 2023 6:00pm (Europe/London)

Tue 30th May 2023 9:00pm (Europe/London)

changed

Europe/London

changed

Yes

Yes

https://owasp.org/www-policy/operational/code-of-conduct

OWASP London CTF Tournament [IN-PERSON]

OWASP London Chapter is pleased to announce the next OWASP London CTF Tournament. Discover vulnerabilities, capture flags, win real prizes!

https://www.eventbrite.co.uk/e/574787925157

https://www.eventbrite.co.uk/e/574787925157

Wed 29th Mar 2023 5:30pm (Europe/London)

Wed 29th Mar 2023 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

https://owasp.org/www-policy/operational/code-of-conduct

OWASP London Chapter In-Person Meetup

Talk 1: What I Found When Modelling Threats In The Open (Source), Dan Conn
Secure development is hard. Throughout the entire development of an open source project, security needs to be top of mind due to a potential myriad threats. Some open source orgs are starting to ask for security matrices, and expect some threat modelling to have taken place, so that the threats of a system can be evaluated. This however, can be difficult. Considering the different use cases of a project that may be running in different architectures can be quite a struggle, combined with sometimes working with developers that may not be familiar with threat modelling in general. This talk will explore how to make threat modelling easier for open source developers through using open source tools such as OWASP Threat Dragon and Threagile, and where each is better suited than the other.
Talk2: An AppSec Point of View On Synthetic Identities, Timur Yunusov
In the era of neobanks with no branches and broadly adopted eKYC standards, the entry barriers for cybercriminals are extremely low. How could FinTech win in this ongoing cat-and-mouse game? How criminals utilise gaps in workflows of the modern payment ecosystem? After looking at mobile applications and the API workflows of dozens of FinTech companies across Europe, the USA and Asia, I will provide real-world examples from both sides of the battle.

https://www.eventbrite.co.uk/e/550592004507/

https://www.eventbrite.co.uk/e/550592004507/

Tue 28th Feb 2023 6:00pm (Europe/London)

Tue 28th Feb 2023 8:45pm (Europe/London)

changed

Europe/London

changed

No

Yes

We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously.
OWASP aims to provide a harassment-free experience for everyone, regardless of gender, sexual orientation, disability, physical appearance, body size, race, age, or religion. We do not tolerate harassment of event participants in any form.
Additionally, participating in OWASP events means you shall also adhere to the OWASP Code of Conduct which you can find here: https://owasp.org/www-policy/operational/code-of-conduct

OWASP London Chapter In-Person Meetup at Amazon

OWASP London Chapter In-Person Meetup

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan, Sherif Mansour and Andra Lezza

Welcome and a brief update on OWASP Projects & Events from the OWASP London Chapter Leaders

Talk 1: "Securing DevOps: Where to Start and What to Measure?" - Stefania Chaplin

How do we secure our DevOps processes? Why is shifting left important? How do we get developers to care about security and empower them to make a difference? Where do we start and what do we measure? Often in software development we operate in silos. Different tribes have different priorities and lexicons. How do we break down these preexisting silos and continue innovating and optimising our software development process? Shifting left can help to break down silos and empower developers to take a security first approach. Measuring DevOps can be hard, DORA metrics can help you to become an Elite performer. Join this session to find out more about these and importantly, when it comes to securing DevOps where to start and what to measure.

Talk 2: "Will FIDO Passkey help us to move on from Passwords?" - Dario Salice

Passwords are bad at protecting our digital assets and they make it harder for us to access them. Security: An estimated 22% of US consumers self-identify as having been hacked at least once. A hacked account sells for as little as $1. Access: Forgetting your password seems like merely an annoyance. However, it contributes to churn on consumer platforms and can make up 50% of corporate IT Support calls. All is not lost; Passkey is here to save the day. In this session, I’ll walk you through what passkey is, how it works, and how it can impact your churn and security goals.

SPEAKERS
Stefania Chaplin, Solutions Architect at Gitlab.

Stefania’s experience as a Solutions Architect within Cybersecurity, DevSecOps and OSS governance means she's helped countless organisations understand and implement security throughout their SDLC. She is an active member of OWASP DevSlop, hosting their technical shows. When not at a computer, Stefania enjoys surfing, yoga and looking after all her tropical plants.

Dario Salice

Dario Salice is a seasoned professional in the space of Telecommunications, Security, and Online-Identities. While most recently working at Google and then Meta, he provided the right security tools to billions of users to protect their online accounts. Dario also launched programs to protect highly targeted individuals from attack. Serving as Meta’s representative on the Board of the FIDO Alliance, an industry standards organization working on strong authentication methods, Dario gained a broader perspective on the global authentication market. His current focus is ramping up an independent boutique consulting service to engage with companies of any size who want to benefit from his insights and experience in the Security & Identity space.

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-456117428507?aff=tc

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-456117428507?aff=tc

Thu 17th Nov 2022 6:00pm (Europe/London)

Thu 17th Nov 2022 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

https://owasp.org/www-policy/operational/code-of-conduct

The next OWASP London Chapter in-person/hybrid event will take place on Thursday 8th September 2022 (6:00pm doors, 6:30pm talks kick off) at Thought Machine offices (nearest tube - Russell Square, Piccadilly Line).
This event will also be live-streamed on OWASP London YouTube channel here:

https://www.youtube.com/OWASPLondon

TALKS:

* "The Iceberg: Your Attack Surface Just Got Bigger (How to mitigate risks in your OSS projects)" - Sonya Moisset

* "Pwning the CI Workflow and How to Prevent It "- Steve Giguere

* Lightning Talk: "Using Trivy and Falco to Detect Malware in a Kubernetes Environment" - Marco Mancini

Register to attend here:

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-407116214557

OWASP London Chapter Meetup

The next OWASP London Chapter in-person/hybrid event will take place on Thursday 8th September 2022 (6:00pm doors, 6:30pm talks kick off) at Thought Machine offices (nearest tube - Russell Square, Piccadilly Line).
This event will also be live-streamed on OWASP London YouTube channel.

TALKS:

* "The Iceberg: Your Attack Surface Just Got Bigger (How to mitigate risks in your OSS projects)" - Sonya Moisset

* "Pwning the CI Workflow and How to Prevent It "- Steve Giguere

* Lightning Talk: "Using Trivy and Falco to Detect Malware in a Kubernetes Environment" - Marco Mancini

Register to attend here:

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-407116214557

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-407116214557

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-407116214557

Thu 8th Sep 2022 6:00pm (Europe/London)

Thu 8th Sep 2022 8:00pm (Europe/London)

changed

Europe/London

changed

Yes

Yes

CODE OF CONDUCT

We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously.

OWASP aims to provide a harassment-free experience for everyone, regardless of gender, sexual orientation, disability, physical appearance, body size, race, age, or religion. We do not tolerate harassment of event participants in any form.

Additionally, participating in OWASP events means you shall also adhere to the OWASP Code of Conduct which you can find here: https://owasp.org/www-policy/operational/code-of-conduct

OWASP Virtual AppSecDays mini-Conference

OWASP Foundation will be running a FREE virtual mini-Conference on Monday, April 27th 2020!

There will be 3 talks:

1. Building and growing an application security team - lessons from a CISO perspective

Presented by Michael Coates

2. Certificate Revocation: Past, Present, Future

Presented by Mark Goodwin

3. The OWASP Top Ten 2020

Presented by Andrew van der Stock

https://appsecdays.org/

https://www.meetup.com/OWASP-London/events/270156101/

Mon 27th Apr 2020 5:00pm (Europe/London)

Mon 27th Apr 2020 7:00pm (Europe/London)

changed

Europe/London

Yes

No

OWASP London Chapter Meetup at Amazon

The next OWASP London Chapter Meeting will take place on Wednesday 13th February 2019 at Amazon London offices in Shoreditch.

Location: Amazon, 1 Principal Place, 115 Worship Street, EC2A 2FA, London

Nearest Tubes: Liverpool Street (6 minute walk), Old Street (11 minute walk), Shoreditch High Street Overground (8 minute walk)

Time: Doors Open at 6:00pm for registration, pizza, drinks and networking. The talks will kick off at 6:30pm.

TALKS:

* "Introducing the OWASP ZAP Heads Up Display (HUD)" - Simon Bennetts (@psiinon)

* "Incident Response in Your Pyjamas" - Paco Hope (@pacohope)

* "Developers - The Lucrative Target for Social Engineers" - Stuart Peck (@cybersecstu)

The full details of the talks and speakers are now available on the OWASP London Wiki Page here:

https://www.owasp.org/index.php/London#Wednesday.2C_13th_February_2019_.28Central_London.29

TICKETS and PHOTO ID REQUIREMENT:

IMPORTANT: Amazon building security rules require that all event attendees need to bring a form of Photo ID such as driving license or passport. The name on the ID document must match the name on the ticket.

You can register to attend this event here (Photo ID required to gain access to the venue):

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-at-amazon-wednesday-13th-february-2019-630pm-tickets-55533038814?aff=ml

https://www.owasp.org/index.php/London#Wednesday.2C_13th_February_2019_.28Central_London.29

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-at-amazon-wednesday-13th-february-2019-630pm-tickets-55533038814?aff=ml

Wed 13th Feb 2019 6:30pm (Europe/London)

Wed 13th Feb 2019 9:30pm (Europe/London)

changed

Europe/London

changed

No

Yes

We hope you enjoy our events, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback or would like to speak to us, we take these matters very seriously. You can find out more about our policies here: https://www.owasp.org/index.php/Governance/Conference_Policies

https://www.owasp.org/index.php/Governance/Conference_Policies

OWASP London Chapter Meeting at JPMorgan

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan, Sherif Mansour, Greg Fragkos
Welcome and a brief update on OWASP Projects, Events and Conferences from the OWASP London Chapter Leaders

"If You Liked It, You Should Have Put Security On It" - Zoë Rose

"Lessons From The Legion (The OWASP London Remix)" - Nick Drage

"A holistic view on Cyber Security in evolutionary terms (food-for-thought)" - Dr. Grigorios Fragkos

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-wednesday-24th-october-2018-630pm-tickets-51430094798?aff=ws

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-wednesday-24th-october-2018-630pm-tickets-51430094798?aff=ws

Wed 24th Oct 2018 6:00pm (Europe/London)

Wed 24th Oct 2018 8:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

Code of Conduct
We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback or would like to speak to us, we take these matters very seriously. You can find out more about our policies here: https://www.owasp.org/index.php/Governance/Conference_Policies

OWASP London Chapter Meeting at the Microsoft Reactor

This event is kindly hosted and sponsored by Microsoft

Location: Microsoft Reactor, 70 Wilson Street, London, EC2A 2DB

Nearest Tubes: Old Street (7-minute walk), Moorgate (7-minute walk), Liverpool Street (7-minute walk)

Doors Open at 6:00pm for registration, pizza, drinks and networking. The talks start at 6:30pm (we start on time)

TALKS:
OWASP Introduction, Welcome and News - Sam Stepanyan, Sherif Mansour & Greg Fragkos

Welcome and a brief update on OWASP Projects,Events and Conferences from the OWASP London Chapter Leaders.

"From zero to hero: building security from scratch" - Anthi Gilligan

Breaches mean financial, regulatory, legal, and above all reputational repercussions. Organisations are quick to react, however with security professionals in high demand and low supply, there has been an increase in individuals jumping on the “cybersecurity” bandwagon. In this talk, we discuss the pitfalls of the inadequately qualified “cybersecurity expert”, and examine the building blocks of a solid information security management system

"Smart Contract Security" - Evangelos Deirmentzoglou

Dapps and many ICOs run on smart contracts and tend to process a substantial amount of funds. This makes them a target, and therefore they often undergo attacks. Combined with the blockchain immutability, vulnerabilities undiscovered during development will exist forever in the blockchain. This talk will dive into the most common smart contract security vulnerabilities and provide in-depth knowledge on how these issues occur and their mitigation. Real world examples will be discussed and vulnerabilities like re-entrancy, overflows, gas limit attacks etc. will be demonstrated.


Lightnining Talk - "Driving OWASP ZAP using Selenium" - Mark Torrens

OWASP ZAP is great tool but it's not magic! When used in a CI/CD pipeline, ZAP needs some help to discover the routes through a web application. Basic authentication, user logins and form validation can all stop ZAP in its tracks. I show how to drive ZAP using Selenium scripts and increase the security coverage of a web application.



SPEAKERS:
Anthi Gilligan

Anthi (@AnGreagach) is an application security engineer at Logitech and has sole responsibility for the company’s vulnerability management, penetration testing and security engineering functions. She has previously held the position of principal security architect for a large Irish banking institution, and acted as a lead pen tester for a consultancy company. Anthi is on the organising committee of Security Bsides Athens and is currently leading the efforts to bring Security Bsides conference to Dublin. She holds a number of academic and professional security qualifications, and loves dogs.

Evangelos Deirmentzoglou

Evangelos Deirmentzoglou (@edeirme) joined the open source community in the winter of 2015 by contributing to Ncrack. In the summer of 2017 he took part in Google Summer of Code 2017 under the guidance of Fotis Chantzis in order to work on Nmap and Ncrack. He currently works as a Security Engineer at Positive Technologies, conducting code auditing, mobile & web penetration testing and smart contract security assessments. He is researching a cybersecurity PhD and focuses on source code analysis, which he has applied for a number of major U.S technology vendors, Fortune 500 companies, banks and medical institutions.

Mark Torrens

Mark Torrens works for Kainos as a Security Architect and this year is completing an MSc in Cyber Security at the University of York.

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-at-ms-reactor-thursday-30th-august-2018-630pm-tickets-49209550089

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-at-ms-reactor-thursday-30th-august-2018-630pm-tickets-49209550089

Thu 30th Aug 2018 6:00pm (Europe/London)

Thu 30th Aug 2018 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

Thu 26th Apr 2018 6:00pm (Europe/London)

Thu 26th Apr 2018 9:00pm (Europe/London)

Europe/London

OWASP London Chapter Meeting

This event is kindly hosted and sponsored by EY.

TALKS:

"SCADA and Other Dangerous Things" - Professor Andrew Blyth

"Is There Room for SecArch in DevSecOps?" - Dimitrios Petropoulos

Lightning Talk: "Introducing Remediate the Flag: a Hands-On AppSec Training Platform" - Andrea Scaduto

Lightning Talk: "Security Testing Automation via Jenkins and Threadfix" - Lucian Corlan & Nikos Savvidis

Doors open at: 6:00pm for registration, networking, pizza & beer.

The talks will kick off at: 6:30pm

Register to attend this event here:

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-26th-april-2018-630pm-tickets-45216218928?aff=mu

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-26th-april-2018-630pm-tickets-45216218928?aff=mu

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-26th-april-2018-630pm-tickets-45216218928?aff=mu

Thu 26th Apr 2018 6:00pm (Europe/Berlin)

Thu 26th Apr 2018 9:00pm (Europe/Berlin)

changed

Europe/Berlin

changed

No

Yes

OWASP Annual AppSec EU Security Conference, the premier application security conference for European developers and security experts. AppSec EU provides attendees with insight into leading speakers for application security and cyber security, training sessions on various applications, networking, connections and exposure to the best practices in cybersecurity.

Why should you attend the AppSec Europe 2018 Conference?

* Technical talks by experts in security, devops and cloud
* Panels to debate tough topics
* Training sessions for hands on learning in top security areas
* Keynotes from well known industry leaders
* Vendor booths to promote the latest advances in security technology services
* A variety of other activities such as capture the flag, security tool training, and more

Application Security Europe 2018

WASP Annual AppSec EU Security Conference, the premier application security conference for European developers and security experts. AppSec EU provides attendees with insight into leading speakers for application security and cyber security, training sessions on various applications, networking, connections and exposure to the best practices in cybersecurity.

Why should you attend the AppSec Europe 2018 Conference?

* Technical talks by experts in security, devops and cloud
* Panels to debate tough topics
* Training sessions for hands on learning in top security areas
* Keynotes from well known industry leaders
* Vendor booths to promote the latest advances in security technology services
* A variety of other activities such as capture the flag, security tool training, and more

https://2018.appsec.eu

https://2018.appsec.eu

Mon 2nd Jul 2018 8:00am (Europe/London)

Fri 6th Jul 2018 5:30pm (Europe/London)

changed

Europe/London

changed

No

Yes

https://www.owasp.org/index.php/London

https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project#Code_of_Ethics

OWASP London Capture The Flag (CTF)

OWASP London Chapter is pleased to announced the 2017 OWASP London CTF Tournament for Application Developers!
CTF (Capture The Flag) is a type of computer security competition. Contestants are presented with a set of challenges and puzzles which test their creativity, technical coding (and googling) skills, and problem-solving ability. Challenges usually cover a number of categories and when solved, each yields a “flag” which is submitted to a real-time scoring service. The difficulty levels are from beginner to advanced.
CTF tournaments are a great and fun way for software developers to learn a wide array of cyber security / application security skills in a safe and legal environment.
Top scorers will win prizes kindly donated by the cyber security technology vendors.
Most programming languages supported.
IMPORTANT: Please bring your own LAPTOP and a charger for it to this event

https://www.eventbrite.co.uk/e/owasp-london-ctf-tickets-39405502920?aff=ot

Thu 9th Nov 2017 6:00pm (Europe/London)

Thu 9th Nov 2017 9:30pm (Europe/London)

changed

Europe/London

changed

No

Yes

The next OWASP London Chapter Meeting will take place on Thursday 28th September 2017 at 18:30 (doors/registration 6:00pm)

This event is kindly sponsored and hosted by John Lewis Partnership.

Location: John Lewis Partnership Head Office, 171 Victoria Street, London, SW1E 5NN

Nearest Tube: Victoria (3 minute walk)

Doors Open at 6pm, the talks start at 6:30pm (we start on time).


Talks:

* OWASP Introduction, Welcome and News - Sam Stepanyan and Sherif Mansour
Welcome and an Update on OWASP Projects & Events from the OWASP London Chapter Leaders

* Application Level Vulnerabilities in Containerized Applications - Benjy Portnoy

Docker containers are transforming the way applications are developed and deployed. Closely tied to DevOps and Continuous Delivery, containers introduce both risks and opportunities to security management in Web applications. This talk will introduce the basic concepts of containers and micro services, how companies use them today, and how to support this technology while elevating the security posture of your application stacks. Various OWASP tools that leverage containers will also be presented.

* Hunting Security Bugs In Web Apps - Suleman Malik
There are so many web applications that work in the background but it can be difficult to know about them. In this talk I’m going to show you some bug hunting techniques and how I exploited vulnerabilities in some major websites. I will cover some topics, which includes bypassing Content security policy (CSP), API endpoint vulnerability, PostMessage vulnerability, CSRF, XSS, Session/Authentication flaws and exploiting some other OWASP Top 10 vulnerabilities


Speakers:

* Benjy Portnoy
Benjy is a seasoned cyber security professional with over 15 years experience in consulting, designing, and implementing strategic information security projects for organizations across EMEA. He is currently the director of DevSecOps at Aqua Security, helping enterprises streamline security into their DevOps processes to secure their containerized applications. Prior to joining Aqua Security, Benjy held senior security architect roles at CA, BlueCoat, and Symantec where he worked closely with CSO’s and security operations teams focusing on vulnerability management, datacenter security, and incident response. Benjy holds both CISA (Certified Information Systems Auditor) and CISSP (Certified Information Systems Security Professional) certifications and is currently completing his master's degree in Information Security and Digital Forensics

* Suleman Malik
Suleman Malik is an independent security researcher and author specialising in web application security, IOS and Android application security. He has reported so many security issues under the industry practice of coordinated disclosure that he is listed in more than 50 Halls of Fame including Google, Microsoft, Intel, Sony, LinkedIN, Blackberry, Apple, Oracle, Huawei, US Department of Defense and so on. He has been featured in top cyber security magazines including hakin9 & Pentest magazine and also has been declared among the top ten highest paid security researchers in the world. HackerOne CEO also has acknowledged his work and invited him to visit the United States of America. Donald Freese, the director of FBI's cyber crime unit (NCIJTF) has also endorsed his skills. Suleman is currently a full time student working toward his degree in computer forensics and security

No

OWASP London Chapter Meeting - September 2017

The next OWASP London Chapter Meeting will take place on Thursday 28th September 2017 at 18:30 (we start

This event is kindly sponsored and hosted by John Lewis Partnership.

Location: John Lewis Partnership Head Office, 171 Victoria Street, London, SW1E 5NN

Nearest Tube: Victoria (3 minute walk)

Doors Open at 6pm, the talks start at 6:30pm (we start on time).


Talks:

* OWASP Introduction, Welcome and News - Sam Stepanyan and Sherif Mansour
Welcome and an Update on OWASP Projects & Events from the OWASP London Chapter Leaders

* Application Level Vulnerabilities in Containerized Applications - Benjy Portnoy

Docker containers are transforming the way applications are developed and deployed. Closely tied to DevOps and Continuous Delivery, containers introduce both risks and opportunities to security management in Web applications. This talk will introduce the basic concepts of containers and micro services, how companies use them today, and how to support this technology while elevating the security posture of your application stacks. Various OWASP tools that leverage containers will also be presented.

* Hunting Security Bugs In Web Apps - Suleman Malik
There are so many web applications that work in the background but it can be difficult to know about them. In this talk I’m going to show you some bug hunting techniques and how I exploited vulnerabilities in some major websites. I will cover some topics, which includes bypassing Content security policy (CSP), API endpoint vulnerability, PostMessage vulnerability, CSRF, XSS, Session/Authentication flaws and exploiting some other OWASP Top 10 vulnerabilities


Speakers:

* Benjy Portnoy
Benjy is a seasoned cyber security professional with over 15 years experience in consulting, designing, and implementing strategic information security projects for organizations across EMEA. He is currently the director of DevSecOps at Aqua Security, helping enterprises streamline security into their DevOps processes to secure their containerized applications. Prior to joining Aqua Security, Benjy held senior security architect roles at CA, BlueCoat, and Symantec where he worked closely with CSO’s and security operations teams focusing on vulnerability management, datacenter security, and incident response. Benjy holds both CISA (Certified Information Systems Auditor) and CISSP (Certified Information Systems Security Professional) certifications and is currently completing his master's degree in Information Security and Digital Forensics

* Suleman Malik
Suleman Malik is an independent security researcher and author specialising in web application security, IOS and Android application security. He has reported so many security issues under the industry practice of coordinated disclosure that he is listed in more than 50 Halls of Fame including Google, Microsoft, Intel, Sony, LinkedIN, Blackberry, Apple, Oracle, Huawei, US Department of Defense and so on. He has been featured in top cyber security magazines including hakin9 & Pentest magazine and also has been declared among the top ten highest paid security researchers in the world. HackerOne CEO also has acknowledged his work and invited him to visit the United States of America. Donald Freese, the director of FBI's cyber crime unit (NCIJTF) has also endorsed his skills. Suleman is currently a full time student working toward his degree in computer forensics and security

https://www.owasp.org/index.php/London#Thursday.2C_28th_September_2017_.28Central_London.29_OWASP_London_Chapter_Meeting

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-28th-september-2017-630pm-tickets-33237487219?aff=fb

Thu 28th Sep 2017 6:00pm (Europe/London)

Thu 28th Sep 2017 8:30pm (Europe/London)

changed

Europe/London

changed

Yes

Yes

https://www.owasp.org/index.php/About_The_Open_Web_Application_Security_Project#Code_of_Ethics

OWASP London Chapter Meeting - July 2017

Location: Just Eat PLC, Fleet Place House, 2 Fleet Place, London, EC4M 7RF

Nearest Tube: St Paul's (5-minute walk).

Doors Open at 6pm, the talks start at 6:30pm (we start on time).

Talks:

1. OWASP Introduction, Welcome and News - Sam Stepanyan and Sherif Mansour
2. So you thought you were safe using AngularJS? Think again! - Lewis Ardern
3 Lightning Talk: OWASP Summit 2017 Outcomes - Dinis Cruz

4. Introducing the OWASP ModSecurity Core Rule Set (CRS) 3.0 - Christian Folini

The full details of the talks and speakers are now available on the OWASP London Wiki Page here:

https://www.owasp.org/index.php/London

You can register to attend this event here:

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-27th-july-2017-630pm-tickets-33237474180?aff=fb

Please note that space is limited, so please only book tickets if you are able to attend.

We will be streaming the event live on OWASP London Facebook page, so you can watch it remotely on www.facebook.com/OWASPLondon

https://www.owasp.org/index.php/London#Thursday.2C_27th_July_2017_.28Central_London.29

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-27th-july-2017-630pm-tickets-33237474180?aff=fb

Thu 27th Jul 2017 6:00pm (Europe/London)

Thu 27th Jul 2017 9:00pm (Europe/London)

changed

Europe/London

changed

Yes

Yes

OWASP London Chapter Meeting - May 2017

The next OWASP London Chapter meeting will take place on Thursday, 18th May 2017 at 18:30 (we start on time!)

This event is kindly sponsored and hosted by Worldpay

Location: Worldpay, The Walbrook Building, 25 Walbrook , London EC4N 8AF

Nearest Tubes: Bank (take exit 8 towards Walbrook) and Cannon Street (2-minute walk)

Time: Doors Open at 6pm, the talks start at 6:30pm (we start on time).
Talks:

Main Talk 1: Threat Modeling Against Payment Systems - Dr. Grigorios Fragkos

Main Talk 2: Unsafe Deserialization Attacks In Java and A New Approach To Protect The JVM - Apostolos Giannakidis

Lightning Talk 1: OWASP Top 10 2017 Changes - Dinis Cruz
Lightning Talk 2: Security solutions for developers who have no time for security - Edwin Aldridge

https://www.owasp.org/index.php/London#Thursday.2C_18th_May_2017_.28Central_London.29

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-18th-may-2017-630pm-tickets-33237461141

Thu 18th May 2017 6:00pm (Europe/London)

Thu 18th May 2017 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

OWASP London Secure Development Hackathon and CTF Competition

OWASP London Secure Application Development Hackathon and CTF event will be taking place on the evenings on 28th and 29th of November 2016 in Central London.

CTF (Capture The Flag) is a type of computer security competition. Contestants are presented with a set of challenges and puzzles which test their creativity, technical (and googling) skills, and problem-solving ability. Challenges usually cover a number of categories and when solved, each yields a “flag” which is submitted to a real-time scoring service. The difficulty levels are from beginner to advanced.

CTF tournaments are a great and fun way for software developers to learn a wide array of applications security skills in a safe and legal environment.

Practice your hacking skills and compete against other participants and
teams - solve challenges and puzzles, capture flags, score points and
win prizes!

IMPORTANT: Please bring your own LAPTOP and a charger for it to both
evenings.

Snacks and drinks will be provided throughout both evenings.

Top 3 scorers will win exciting prizes generously provided by security
technology vendors.

https://www.owasp.org/index.php/London#Monday.2C_28th_November_2016_.28Central_London.29_OWASP_London_Hackathon_Workshop_and_CTF

https://www.eventbrite.co.uk/e/owasp-london-hackathon-and-ctf-tickets-29190020136

Mon 28th Nov 2016 6:00pm (Europe/London)

Tue 29th Nov 2016 9:30pm (Europe/London)

changed

Europe/London

changed

No

Yes

Participation is FREE, but the number of seats is strictly limited and
reservation is required to attend. Bring your own LAPTOP!

OWASP London Chapter Meeting

Open Web Application Security London Chapter event with 2 main talks on application security and 2 lightning talks on the new secure DevOps tools and practices. Keynote talk by the Global Director of PCI Security Standards Council Mr Jeremy King

https://www.owasp.org/index.php/London#Thursday.2C_24th_November_2016_.28Central_London.29

https://www.eventbrite.co.uk/e/owasp-london-chapter-meeting-thursday-24th-november-2016-630pm-tickets-29073490593

Thu 24th Nov 2016 6:30pm (Europe/London)

Thu 24th Nov 2016 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

This is event is free and open to anyone interested in learning more about software security / information security.