OWASP 20th Anniversary Event has ended

Create Your Own Event

OWASP 20th Anniversary Event

Thank you for joining us at our 20th Anniversary Event! All sessions were recorded and will be posted in the coming weeks on the OWASP YouTube channel.

We have been working hard to secure the world through challenges and discovery. And now, it’s time to celebrate! Many of you have played a crucial role in the Foundation’s enduring history, and we encourage you to participate in the celebration coming this September! Our theme, Securing the Next 20 Years, is encouraging and exciting as we look ahead to the next 20 years!

Join us for FREE at this live 24-hour global event as we honor the past, celebrate the present, and embrace the future of OWASP and cybersecurity. Hear from world-renowned keynotes and special speakers, and network with your peers. It is FREE to attend, however, registration IS required, to gain access to the session links.

3:00am EDT

Opening Remarks On-Line

3:10am EDT

AppSec is too hard!? On-LinePhilippe De Ryck

4:00am EDT

OWASP Mobile Security Testing Guide Flagship Project On-LineCarlos Holguera • Sven Schleier OWASP Top 10 Privacy Risks 2021 On-LineFlorian Stahl Blockchain-based Security Framework for Cyber Physical Systems (BSF-CPS) On-LineDr. Abhilasha Vyas How Security, Development & Testing can work together to stop the same recurring vulnerabilities appearing in the OWASP Top 10 On-LineStefania Chaplin

4:30am EDT

OWASP ZAP Flagship Project On-LineSimon Bennetts Introducing graph theory to Policy-As-Code On-LineBarak Schoster Your company, as a Knowledge Graph - the foundation of cybersecurity’s future On-LineOvidiu Cical Automatic Vulnerability Remediation: The Trusted and Secure Road to Developer Happiness On-LineRami Elron

5:00am EDT

OWASP Juice Shop Flagship Project On-LineBjörn Kimminich Connecting the Dots: How Threat Intelligence Protects the Applications On-LineCatalin Curelaru Achieving the Web Isolation Nirvana - How far along are we? On-LineJasvir Nagra • Pedro Fortuna Effective Usage Analysis: The Shortest Path Between a Developer and Accelerated Product Releases On-LineRami Elron

5:30am EDT

Attacking the microservice systems: methods and practical tips On-LineAlexander Barabanov OWASP Software Assurance Maturity Model (SAMM) Flagship Project On-LineSeba Deleersnyder • Bart De Win OWASP Application Gateway: What is it and how can you use it to secure your webapp? On-LineGian-Luca Frei Objects In The Rear View Mirror Are Closer Than They Appear On-LineErez Yalon

6:00am EDT

OWASP Security Knowledge Framework Flagship Project On-LineGlenn ten Cate • Riccardo ten Cate Stop the looters: a method to detect digital skimming attacks On-LineNikolaos Alexiou It's Not Your Developers' Fault On-LineEdwin Kwan Top 10 Challenges for DevSecOps On-LineGary Robinson

6:30am EDT

OWASP Web Security Testing Guide Flagship Project On-LineMatteo Meucci OWASP API Security Top 10 - A Beginner's Guide to Mitigation On-LineIsabelle Mauny OWASP Nettacker Project Presentation On-LineSam Stepanyan Feedback loop in DevSecOps - mature security process and dev cooperation On-LineDaniel Krasnokucki

7:00am EDT

OWASP Security Shepherd Flagship Project On-LineSean Duggan Scaling AppSec through Education On-LineGrant Ongers

7:30am EDT

8:00am EDT

Our Secure Future On-LineJaya Baloo

9:00am EDT

OWASP OWTF Flagship Project On-LineSaurabh Nandedkar Code-Origin Policy: Towards a Formal User Privacy Protection for the Web On-LinePhu H. Phung React Native Security. Addressing typical mistakes On-LineJulia Potapenko

9:30am EDT

OWASP Cloud-Native Application Security Top 10 Flagship Project On-LineRon Vider Good Bot, Bad Bot: Characterizing Automated Browsing Activity On-LineNick Nikiforakis Preventing an OWASP Top 10 in the world of AI On-LineAaron Ansari Five philosophies to building better application logs On-LineVeronica Schmitt

10:00am EDT

OWASP ModSecurity Core Rule Set Flagship Project On-LineChristian Folini Rough Consensus - An OWASP Story On-LineJeff Williams Over 20 Years of SQL Injection Attacks in the Wild - Time to Refine and Optimize Web Attack Detection by Using Data Mining Techniques On-LineOr Katz Agile Threat Modeling with Open-Source Tools On-LineChristian Schneider

10:30am EDT

OWASP Top 10 Flagship Project "Intro of Top 10" On-LineAndrew van der Stock What Shall We Do With a Vendor SBOM? On-LineWendy Nather OWASP ESAPI – A Retrospective: The Good, the Bad, & the Ugly On-LineKevin Wall Your code might be secure, but what about your pipeline? Challenges of securing build/deployment environment. On-LineMarcin Szydłowski

11:00am EDT

11:30am EDT

AppSec: from Outsiders to Allies On-LineChris Wysopal

12:30pm EDT

OWASP CSRFGuard Flagship Project On-LineAzzeddine Ramrami • Albert-Tóth István Threat Modeling the CI/CD Pipeline to Improve Software Supply Chain Security On-LineDan Cornell The future of Dev[Sec]Ops transformation On-LineLarry Maccherone Common NGINX Misconfigurations That Leave Your Web Server Open To Attack On-LineSpencer Pearlman

1:00pm EDT

OWASP Application Security Verification Standard (ASVS) Flagship Project On-LineAndrew van der Stock • Jim Manico Everything You Always Wanted to Know About Fingerprinting Browser Extensions, But Were Afraid to Ask On-LineNick Nikiforakis AppSec Timeline: Wins, Failures, Promises, and Predictions On-LineJoseph Feiman Unlocking Mobile App Security Secrets On-LineJan Seredynski

1:30pm EDT

OWASP DefectDojo Flagship Project On-LineMatt Tesauro • Aaron Weaver How To Review Code For Vulnerabilities On-LineVickie Li Looking at 4 years of web honeypot attacks: tactics, techniques and trends On-LineMalcolm Heath • Raymond Pompon Common Application Security Mistakes that Enable Automated Attacks On-LineJason Kent

2:00pm EDT

OWASP Cheat Sheet Series Flagship Project On-LineJim Manico Fight Club | Grow your OWASP Chapter On-LineSam Stepanyan • Tom Brenan Bot or human? Detecting malicious bots with machine learning in 2021 On-LineBenjamin Fabre • Antoine V Kubernetes Security: Attacking and Defending K8s Clusters On-LineMagno Logan

2:30pm EDT

OWASP Amass Flagship Project On-LineJeff Foley Automate Security, Don't Tell Your Boss On-LineMatt Tesauro The future is simple - introducing the CRE On-LineRob van der Veer • Spyros Gasteratos Automated Finding Correlation where do SAST, DAST and IAST overlap On-LineRan Klein • Mobb

3:00pm EDT

3:30pm EDT

20:20 - The History and Future of OWASP On-LineMark Curphey

4:30pm EDT

OWASP Dependency Track Flagship Project On-LineSteve Springett Security Chaos Engineering - Turning the Tide in the War on Uncertainty in Cyber Security On-LineAaron Rinehart Decoded: Leverage Cybersecurity as a Business Enabler On-LineNicole Dove Creating an IoT-connected Mobile App Compliance Program Leveraging OWASP MASVS On-LineBrian Reed

5:00pm EDT

OWASP Top 10 Flagship Project "The making of the OWASP Top 10 and beyond" On-LineBrian Glas Achieving Security by Shifting Left in Agile On-LineBHUSHAN B GUPTA Developers Struggle with Application Security (and How to Make It Better) On-LineScott Gerlach

5:30pm EDT

OWASP Dependency-Check Flagship Project On-LineJeremy Long These are the Vulns You are Looking For: AppSec Champions & Jedi Mind Tricks On-LineJohn Dickson

6:00pm EDT

OWASP CycloneDX Flagship Project On-LineSteve Springett • Patrick Dwyer Running a local Chapter On-LineSerge Borso

6:30pm EDT

All your Ether belong to us (a.k.a Hacking Ethereum-based DApps) On-LineLuis Quispe Gonzales

7:00pm EDT

7:30pm EDT

Who Deserves Cybersecurity? Expanding Our Circle of Care On-LineEva Galperin

8:30pm EDT

Live Q&A Session On-LineTroy Hunt Security As Code - The New Model Of Achieving Security At Scale On-LineDr. Chenxi Wang Using binary search algorithms for blind sql injection On-LineJuan Pablo Quiñe Paz

9:00pm EDT

DevSecOps in 2031: How robots and humans will secure apps together On-LineStefan Streichsbier Redefining Threat Modeling: Security team goes on vacation On-LineJeevan Singh Hack Your APIs in 15 Minutes or Less On-LineHimanshu Dwivedi

9:30pm EDT

Back to Basics: Looking for subtle bugs in beginner programming constructs On-LineCole Cornford Security Metrics: Protecting Our Digital Assets of the Future On-LineCaroline Wong

10:00pm EDT

Purple Teaming with OWASP PurpleTeam On-LineKim Carter An Attackers View on APAC's 2021 Three Major Breaches On-LineRic Campo

10:30pm EDT

Birds & Buttons - Cyber Risk Success Criteria for Board & Executives On-LineShamane Tan Costly mistakes in serverless computing On-LineMiguel Calles

11:00pm EDT

AWS (mis)configuration from an attacker’s-eye view On-LineKavisha Sheth

11:30pm EDT

vAPI : Vulnerable Adversely Programmed Interface (OWASP API Top 10) On-LineTushar Kulkarni

12:00am EDT

Post-DevOps, what should we shift-left? On-LineRiotaro OKADA

12:30am EDT

Software Security Engineering (Learnings from the past to fix the future) On-LineDebasis Mohanty

1:00am EDT

Security begins with secure development environments On-LineVandana Verma • Steve Coochin

1:30am EDT

Building Diversity into AppSec On-LineZoe Braiterman • Loredana Mancini • Vandana Verma • Aastha Sahni • Jessica Gottsleben

2:30am EDT

Closing Remarks On-LineVandana Verma