| Dienstag, 14. November 2017 | |
|---|---|
| Uhrzeit | Beschreibung |
| 08:15 - 08:55 |
Einlass |
| 08:55 - 09:00 |
Begrüßung / Welcome Christian Becker |
| 09:00 - 09:45 |
Keynote t.b.a Prof. Dr. Matthew Smith (Universität Bonn) |
| 09:45 - 10:00 |
OWASP Cheat Sheet Workshop t.b.a |
| 10:00 - 10:30 |
Building secure software with OWASP tools and guides Martin Knobloch (OWASP) |
| 10:30 - 11:00 |
Kaffeepause / Coffee Break |
| 11:00 - 11:30 |
PrivacyScore: ein Benchmarking-Portal zur Analyse von Webseiten auf Sicherheits- und Privatheitsprobleme Pascal Wichmann, Dominik Herrmann (Universität Hamburg) |
| 11:30 - 12:00 |
Threat Hunting mit Applikations-Logs und Sigma Thomas Patzke |
| 12:00 - 12:30 |
Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs Giancarlo Pellegrino (CISPA) |
| 12:30 - 13:30 |
Mittagspause / Lunch Break |
| 13:30 - 14:00 |
The Impact of Third-party Code on Android App Security Erik Derr (CISPA) |
| 14:00 - 15:00 |
Lightning Talks
|
| 15:00 - 15:25 |
Kaffeepause / Coffee Break |
| 15:25 - 16:15 |
Invited Talk Breaking XSS mitigations via Script Gadgets Sebastian Lekies, Krzysztof Kotowicz, Eduardo Vela Nava (Google) |
| 16:15 - 16:45 |
Chameleon: Automatic Generation of Low-Interaction Web Honeypots Marius Musch (TU Braunschweig), Martin Härterich (SAP SE) |
| 16:45 - 17:15 |
Large Scale Analysis of CORS misconfigurations Jens Müller (Ruhr-Universität Bochum) |
| 17:15 - 17:30 |
OWASP Juice Shop 5.x and beyond Björn Kimminich (Kuehne + Nagel) |