Monday, November 25, 2013

AppSecUSA 2013 Wrap Up


I wanted to take a moment to thank EVERYONE who helped out with the OWASP Foundation AppSecUSA 2013 event.

In total we raised over $250,000.00 for OWASP Foundation and below I have included just a few media hits that mention the event inline with our mission of raising awareness.  If you have additional items that I missed, please add them in the comments.

A FAQ has been the videos - we have them coming online here:  http://www.youtube.com/user/OWASPGLOBAL

Semper Fi,

Tom Brennan
973-202-0122




AppSec USA Hits:

Study: Most Application Developers Don't Know Security, But Can Learn
Dark Reading
http://www.darkreading.com/vulnerability/study-most-application-developers-dont-k/240164162

Hack-a-thon Finds 220 Bugs in Facebook, Google, Etsy
PGMag.com
http://securitywatch.pcmag.com/vulnerabilities/318237-hack-a-thon-finds-220-bugs-in-facebook-google-etsy

How Facebook reveals your friends list even when it’s set to private
VentureBeat
http://venturebeat.com/2013/11/21/facebook-friends-list/

Going Back to the Future in the Name of Good Security
Threatpost
http://threatpost.com/going-back-to-the-future-in-the-name-of-better-security

Moving from Do Not Track to Can Not Track
Threatpost
http://threatpost.com/moving-from-do-not-track-to-can-not-track

"Let's Do Security That Matters"
Threatpost
http://threatpost.com/lets-do-security-that-matters

Information Security: We Still Have a Long Way to Go
InformationWeek
http://www.informationweek.com/security/application-security/application-security-we-still-have-a-long-way-to-go/d/d-id/1005798

Where Developers are Dropping the Ball – OWASP AppSecUSA
Information Security Buzz
http://www.informationsecuritybuzz.com/developers-dropping-ball-owasp-appsecusa/

If you are running your business on a mobile device you may be putting your customers at risk
PandoDaily
http://pandodaily.com/2013/11/20/if-you-are-running-your-business-on-a-mobile-device-you-may-be-putting-your-customers-at-risk/

iOS Point-of-Sale Devices Pose Security Risk
eSecurity Planet
http://www.esecurityplanet.com/mobile-security/ios-point-of-sale-devices-pose-security-risk.html

Wait, wait… don’t pwn me! – Game show on security news
Trusted Software Alliance
http://trustedsoftwarealliance.com/2013/11/22/wait-wait-dont-pwn-me-game-show-on-security-news/

OWASP Foundation: New York Times CTO; Senior Executives from HP, Oracle, Bloomberg LP Among Confirmed Speakers For AppSec USA
Dark Reading
http://www.darkreading.com/applications/owasp-foundation-new-york-times-cto-seni/240161802

Security: I think we can win
Selikoff.net
http://www.selikoff.net/2013/11/20/keynote-security-i-think-we-can-win-app-sec-usa/

The perilous future of browser sercurity
selikoff.net
http://www.selikoff.net/2013/11/20/browser-security-at-app-sec-usa/

Training developers at appsecusa
Selikoff.net
http://www.selikoff.net/2013/11/20/training-developers-at-appsecusa/

Build but don't break
Selikoff.net
http://www.selikoff.net/2013/11/20/http-security-headers-at-app-sec-usa/

HTML 5: Risky Business of Security Tool Chest?
Selikoff.net
http://www.selikoff.net/2013/11/20/html5-security-features-at-app-sec-usa/

What could go wrong – thinking differently about security at app sec usa
Selikoff.net
http://www.selikoff.net/2013/11/20/what-could-go-wrong-thinking-differently-about-security-at-app-sec-usa/

Java and Oracle on security at app sec usa
Selikoff.net
http://www.selikoff.net/2013/11/20/java-and-oracle-on-security-at-app-sec-usa/

DevOps and Portfolios
Selikoff.net
http://www.selikoff.net/2013/11/21/jeff-williams-on-dev-ops-and-portfolios-at-app-sec-usa/

Accidental Abyss: Data Leakage
Selikoff.net
http://www.selikoff.net/2013/11/21/protect-data-loss-on-the-net-at-app-sec-usa/

Introduction to the newest addition to OWASP Top 10
Selikoff.net
http://www.selikoff.net/2013/11/21/using-components-with-known-vulnerabilities-at-app-sec-usa/

Everything we know about Web security is wrong
Selikoff.net
http://www.selikoff.net/2013/11/21/everything-we-know-about-web-security-is-wrong-at-app-sec-usa/

Not All CSRF Defenses are created Equal
Selikoff.net
http://www.selikoff.net/2013/11/21/csrf-defenses-at-app-sec-usa/

AppSensor at AppSec USA in New York
Web Security, Usability and Design
https://www.clerkendweller.com/2013/11/1/AppSensor-at-AppSec-USA-in-New-York

AppSec USA 2013
SecurityOrb
http://www.securityorb.com/events/past/

Bombshell Tech
AppSec USA 2013
http://bombshelltech.wordpress.com/2013/11/03/appsec-usa-2013/

AppSec USA, November 18-21, NYC
Software Developers' Journal
http://sdjournal.org/appsec-usa-november-18-21-nyc/

OWASP Foundation Presents: AppSecUSA 2013
Gary's Guide
http://www.garysguide.com/events/tun6ct3/OWASP-Foundation-Presents-AppSecUSA-2013-New-York-NY

OWASP AppSec USA 2013
Government Security News
http://www.gsnmagazine.com/events/28344/owasp_appsec_usa_2013

OWASP AppSec USA 2013
Homeland Security Today
http://www.hstoday.us/calendar/display_event.cgi?event=409

https://twitter.com/Jose_Pagliery/status/403211609038151680
CNN
At @appsecusa hearing @joshcorman & @c7five discuss hacking cars, pacemakers & insulin pumps. Scary, sobering stuff.

https://twitter.com/Jose_Pagliery/status/403549238048485376
CNN
Had an eye-opening experience at @appsecusa.

http://www.twitter.com/appsecusa
AppSecUSA Photos and comments from the show floor

Did we MISS SOMETHING?  Add it to the comments.


No comments: