Open Tech Calendar

OWASP London Chapter Meetup [In-Person] at Amazon London offices

This event is kindly sponsored and hosted by Amazon. There is limited seating available for in-person attendees. Registration required. Please note that this event will be live-streamed on YouTube for the online audience. Recordings will be available on OWASP London YouTube channel: https://www.youtube.com/OWASPLondon

Venue Location: 1, Principal Place, Amazon LHR16, Worship St, London EC2A 2FA

Nearest Tubes: Liverpool Street - 6 min walk, Shoreditch High Street Overground 7 min walk

Doors Open at 6pm for registration, food, drinks and networking. The talks start at 6:30pm (we start on time).

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan

Welcome and a brief update on OWASP Projects & Conferences

Talk 1: "Security Chaos Engineering: When and How You Should Break Your System" - Anais Urlichs

The real cost of misconfiguration for businesses has been set to several trillion over the past years. These costs are the result of misconfiguration in infrastructure and workloads. One way to proactively identify misconfiguration is through security scanning. The scan results provide us with insights into the security posture of our services over time. However, these scanners treat our resources as static and evaluate misconfiguration only in single instances. To assess the potential impact of misconfiguration in our production environment, we need additional tools. In this talk, we will look at ways Chaos Engineering and Security Experimentation can help us minimise the potential damage of misconfiguration. Chaos Engineering is the process of intentionally introducing fault into a system to test its resilience to failure. Anais will walk you through the principles of Security Chaos Engineering and how it can be used to proactively identify misconfiguration and make our deployment pipeline and services more robust.

Talk 2: "It’s Not a Bug It’s Emergent Behaviour - Generative AI, Its Cybersecurity Risks and Benefits" - Sherif Mansour

A curated talk on generative AI, where Sherif will present his research findings beginning with an overview of the technology, then discuss its current technical risks, and explore its promising security use cases without making grand claims. Additionally, this talk dive into design considerations when developing web applications utilising generative AI. To conclude, Sherif will introduce open-source software announced during the talk, encouraging attendees to use and investigate them at their own discretion.

SPEAKERS
Anaïs Urlichs (@urlichsanais)

Anaïs Urlichs is a Developer Advocate at Aqua Security, where she contributes to Aqua’s cloud native open source projects. When she is not advocating DevOps best practices, she runs her own YouTube Channel centered around cloud native technologies. Before joining Aqua, Anais worked as SRE at Civo, a cloud native service provider, where she worked on infrastructure for hundreds of tenant clusters. As OpenUK ambassador, her passion lies in making tools and platforms more accessible to developers and community members.

Sherif Mansour (@kerberosmansour)

Sherif Mansour is the global director of information security at JustEat Takeaway.com and has been working in the field of information security for 19 years. He was the OWASP chairman and sat on of the OWASP foundations' board for four years. He was also one of the founding governing board members for the OpenSSF Foundation which he represented the OWASP Foundation. Sherif contributed to several OWASP projects and was one the main authors of the CIS Benchmark for Tomcat 7/8. As a security researcher he has disclosed vulnerabilities in Microsoft, Oracle, SAP and SiteSpect products.

TICKETS
This event is free to attend for both members and non-members of OWASP and is open to anyone interested in web application and cyber security. Please note that you MUST book your place to be admitted to the event by the building security - your name will be checked against the guest list. Please bring a Photo ID as this is the Amazon's building security requirement.

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-in-person-tickets-634995969037

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-in-person-tickets-634995969037

Tue 30th May 2023 6:00pm (Europe/London)

Tue 30th May 2023 9:00pm (Europe/London)

changed

Europe/London

changed

Yes

Yes

https://owasp.org/www-policy/operational/code-of-conduct

OWASP London Chapter In-Person Meetup at Amazon

OWASP London Chapter In-Person Meetup

TALKS:

OWASP Introduction, Welcome and News - Sam Stepanyan, Sherif Mansour and Andra Lezza

Welcome and a brief update on OWASP Projects & Events from the OWASP London Chapter Leaders

Talk 1: "Securing DevOps: Where to Start and What to Measure?" - Stefania Chaplin

How do we secure our DevOps processes? Why is shifting left important? How do we get developers to care about security and empower them to make a difference? Where do we start and what do we measure? Often in software development we operate in silos. Different tribes have different priorities and lexicons. How do we break down these preexisting silos and continue innovating and optimising our software development process? Shifting left can help to break down silos and empower developers to take a security first approach. Measuring DevOps can be hard, DORA metrics can help you to become an Elite performer. Join this session to find out more about these and importantly, when it comes to securing DevOps where to start and what to measure.

Talk 2: "Will FIDO Passkey help us to move on from Passwords?" - Dario Salice

Passwords are bad at protecting our digital assets and they make it harder for us to access them. Security: An estimated 22% of US consumers self-identify as having been hacked at least once. A hacked account sells for as little as $1. Access: Forgetting your password seems like merely an annoyance. However, it contributes to churn on consumer platforms and can make up 50% of corporate IT Support calls. All is not lost; Passkey is here to save the day. In this session, I’ll walk you through what passkey is, how it works, and how it can impact your churn and security goals.

SPEAKERS
Stefania Chaplin, Solutions Architect at Gitlab.

Stefania’s experience as a Solutions Architect within Cybersecurity, DevSecOps and OSS governance means she's helped countless organisations understand and implement security throughout their SDLC. She is an active member of OWASP DevSlop, hosting their technical shows. When not at a computer, Stefania enjoys surfing, yoga and looking after all her tropical plants.

Dario Salice

Dario Salice is a seasoned professional in the space of Telecommunications, Security, and Online-Identities. While most recently working at Google and then Meta, he provided the right security tools to billions of users to protect their online accounts. Dario also launched programs to protect highly targeted individuals from attack. Serving as Meta’s representative on the Board of the FIDO Alliance, an industry standards organization working on strong authentication methods, Dario gained a broader perspective on the global authentication market. His current focus is ramping up an independent boutique consulting service to engage with companies of any size who want to benefit from his insights and experience in the Security & Identity space.

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-456117428507?aff=tc

https://www.eventbrite.co.uk/e/owasp-london-chapter-in-person-meetup-tickets-456117428507?aff=tc

Thu 17th Nov 2022 6:00pm (Europe/London)

Thu 17th Nov 2022 9:00pm (Europe/London)

changed

Europe/London

changed

No

Yes

https://owasp.org/www-policy/operational/code-of-conduct

OWASP London Chapter Meetup at Amazon

The next OWASP London Chapter Meeting will take place on Wednesday 13th February 2019 at Amazon London offices in Shoreditch.

Location: Amazon, 1 Principal Place, 115 Worship Street, EC2A 2FA, London

Nearest Tubes: Liverpool Street (6 minute walk), Old Street (11 minute walk), Shoreditch High Street Overground (8 minute walk)

Time: Doors Open at 6:00pm for registration, pizza, drinks and networking. The talks will kick off at 6:30pm.

TALKS:

* "Introducing the OWASP ZAP Heads Up Display (HUD)" - Simon Bennetts (@psiinon)

* "Incident Response in Your Pyjamas" - Paco Hope (@pacohope)

* "Developers - The Lucrative Target for Social Engineers" - Stuart Peck (@cybersecstu)

The full details of the talks and speakers are now available on the OWASP London Wiki Page here:

https://www.owasp.org/index.php/London#Wednesday.2C_13th_February_2019_.28Central_London.29

TICKETS and PHOTO ID REQUIREMENT:

IMPORTANT: Amazon building security rules require that all event attendees need to bring a form of Photo ID such as driving license or passport. The name on the ID document must match the name on the ticket.

You can register to attend this event here (Photo ID required to gain access to the venue):

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-at-amazon-wednesday-13th-february-2019-630pm-tickets-55533038814?aff=ml

https://www.owasp.org/index.php/London#Wednesday.2C_13th_February_2019_.28Central_London.29

https://www.eventbrite.co.uk/e/owasp-london-chapter-meetup-at-amazon-wednesday-13th-february-2019-630pm-tickets-55533038814?aff=ml

Wed 13th Feb 2019 6:30pm (Europe/London)

Wed 13th Feb 2019 9:30pm (Europe/London)

changed

Europe/London

changed

No

Yes

We hope you enjoy our events, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback or would like to speak to us, we take these matters very seriously. You can find out more about our policies here: https://www.owasp.org/index.php/Governance/Conference_Policies