OWASP AppSec Ireland 2012

fcerullo

The OWASP AppSec Ireland Conference will be held at Trinity College Dublin from September 4th through 6th 2012. There will be training courses on September 4th and 5th followed by plenary sessions on the 6th.

This conference, in its 4th consecutive year, is a premier gathering for Information Security leaders, executives from Fortune 500 firms along with technical thought leaders, security architects and lead developers.

This year we have the pleasure to count with the presence of Jeremiah Grossman (CTO, Whitehat Security), Reeny Sondhi (Director, Product Security at EMC Corp), Rafal Los (Chief Security Evangelist, HP) among so many other distinguished professionals.

More information about the event here: www.appsecireland.org

Just to add a little fun to it, here is a small challenge that will avail a 20% discount towards the conference registration fees to the first 3 individuals who solve it.

"A french man who likes to be cryptic lost a piece of paper with the following message written on it VXVWRGZV. When I asked around where I could find him, the only response I got was he is heading to APPSECIRELAND2012"

Those who figure out the "special word" could use it during registration to the conference: http://reg.appsecireland.org

Best of luck and see you soon.

Fabio

Cerberus

Also just to remind you guys about the secure coding competition we're running in tandem with the conference. OWASP AppSec Ireland 2012 will host a secure coding competition to give people the chance to test their secure coding skills and challenge other secure coders for the title of AppSec Ireland 2012 Secure Coding Competition (SCC) Champions. The competition is open to everybody and is designed to promote awareness of the benefits of designing and developing secure applications – a skill that all aspiring and accomplished software developers should aim to possess. For more information see here: http://www.appsecireland.org/?page_id=136. Feel free to ask for more details or PM me.

[-0-]

Why is it limited to Java and .NET apps, why can't you write one in C or C++?

Cerberus

Hi, the reason for the limitation to .NET and Java is simply a matter of logistics of judging and scoring the application. We needed to be sure that both the automated tools and the human judges would be able to handle the application technology stack. Although the SAST solution could handle many languages, between the guys organising it we decided we could handle .NET and Java reasonably confidently. We felt also that these two languages still cater to a wide enough audience of developers so as not to be exclusive.

We don't mean it as an endorsement of any of the languages or that they are more secure than others. However, I'm not sure if C/C++ would be my first choice for a run-of-the-mill web application, but each to their own :-)