Application and Mobile Security

We are building a community of Cyber Security experts end enthusiasts where we can exchange ideas, we can grow professionally and we can get in touch with the community members.Feel free to contribute with articles or comments, launching questions on this platform! We organize both formal and informal meetings with Cyber Security topics. You are welcome as attendee or speaker!For more information check out our webpage: www.swiss-cybersecurity.chBe part of it!

Mauro Verderosa

Application security is the practice of developing and testing secure applications, which protect user data within the software itself.

During the event will be presented by Sam Stepanyan OWASP (Open Web Application Security Project) which is a non-profit organization famous for the OWASP Top 10 Application Security Risks document, however that’s where the knowledge of OWASP resources ends for most people. Many organizations are simply unaware of OWASP’s hundreds of various tools, guidelines, standards, and other open-source projects. This talk will showcase how practitioners can implement various OWASP projects as foundational pieces of a successful application security program: from requirements gathering, threat modeling, vulnerability scanning, vulnerability management, security testing, code review to best practices, maturity assessments, and developer training.All software contains vulnerabilities and this prevalence of software weaknesses is a key motivation for using application security testing (AST) tools, says Dr. Thomas P. Scanlon. With a growing number of application security testing tools available, it can be confusing for information technology leaders, developers, and engineers to know which tools address which issues. This talk will help to navigate the sea of offerings by categorizing the different types of AST tools available, explaining the benefits of each, and providing guidance on how and when to use each type of tool.In a world of decentralized cloud architectures and continuous delivery, old-style WAFs are facing many challenges. A new way of runtime protection resolves both the organisational and technical problems. Daniel Estermann's talk will explain how Microgateways enforce Zero Trust, both while keeping up agility and facilitating a DevSecOps culture.Abdelmajid Aneddame will close the session presenting DevSecOps and automation as one of the pillars of modern application developpement, by using Programmatic APIs to build everything as Code.AGENDA:17:30-17:45 Welcoming and Swiss CyberSecurity News17:45 -19:10 Presentations19:10 -19:30 Q&amp;AABOUT THE SPEAKERS:<ul><li>Sam Stepanyan is an independent Application Security Consultant with over 20 years of experience in the IT industry with a background in software engineering and web application development. Sam has worked for various financial services institutions in the City of London specializing in Application Security consulting, Secure Software Development Lifecycle (SDLC), developer training, source code reviews, and vulnerability management. He is also a Subject Matter Expert in Web Application Firewalls (WAF) and Security Information and Event Management (SIEM) systems. Sam holds a Master's degree in Software Engineering and a CISSP certification. Sam currently serves as a London Chapter Leader of the Open Web Application Security Project (OWASP) - a worldwide not-for-profit charitable organization focused on improving the security of software.</li><li>Dr. Thomas P. Scanlon is a Senior Research Scientist and Technical Program Manager at the Software Engineering Institute at Carnegie Mellon University. He leads the CERT Data Science program which incorporates artificial intelligence, machine learning, and statistical analyses to develop solutions for cybersecurity challenges. Additionally, he performs applied research in software engineering, DevSecOps, cyber risk management, threat modeling, and supply chain security. Previously, he worked for more than a decade in IT leadership roles with Fortune 500 companies.</li><li>Daniel Estermann has been working with application security for 15 years. As a former software engineer, he knows how difficult it is to write secure applications. As a technical consultant and product manager, he has witnessed the shift away from perimeter security to zero-trust himself. In product marketing, Mr. Estermann is still a bridge-builder between potential customers, their needs, and the Airlock product.</li><li>Abdelmajid Aneddame is a Cloud Solutions Architect | Microsoft Certified Trainer | DevOps &amp; DevSecOps Advocate &amp; Speaker. As a cloud Architect, he has worked for many large compagnies in the IT field, designing and implementing Azure &amp; AWS Infrastructure Solutions, deploying &amp; Operating S-SDLC PaaS platforms and third party vendors. He is passionate about helping people and leveraging his technical knowledge to solve meaningful, real-world problems that make a real impact on society.</li></ul>Swiss CyberSecurity is partnering with (ISC)2 and ISACA, thus our participants can earn CPE credits attending the conferences. EVENT SPONSOR:Airlock Secure Access Hub combines the important IT security issues of filtering and authentication into a well-coordinated overall solution that sets standards in terms of usability and services. The Secure Access Hub covers all important functions of modern IT security in this field: from a web application firewall (WAF) awarded by journalists to a customer identity management (cIAM) system with integrated strong customer authentication trusted by Swiss banks, to API security that meets the latest requirements. The Airlock IT security solution protects more than 20 million active digital identities and 30,000 back-ends from over 550 customers around the world. Airlock is a security innovation of Ergon Informatik AG.

The Swiss Ergon Informatik AG, founded in 1984, is a leader in the development of individual software solutions and software products. The basis for its success is 330 highly qualified IT specialists who, thanks to their outstanding specialist knowledge, can quickly anticipate new technology trends and ensure decisive competitive advantages with innovative solutions. Ergon Informatik mainly implements large-scale projects in the B2B sector.

The webinar link will be shared on the 27th of April - 12:30 CEST via Eventbrite. Please subscribe to the event with an e-mail address where you can receive messages related to the event.Follow the Swiss CyberSecurity Community on <a href="https://www.facebook.com/SwCybSec/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Facebook</a>, <a href="https://www.linkedin.com/company/swiss-cybersecurity/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">LinkedIn</a>, <a href="https://www.youtube.com/channel/UCKcloKHMjdXF1b4FwfkRPYw" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Youtube</a>, and <a href="https://twitter.com/SwCybSec" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Twitter</a> and subscribe to the <a href="https://www.swiss-cybersecurity.ch/mlist" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Newsletter</a> and be an active member of our <a href="https://www.linkedin.com/groups/8575295/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">LinkedIn Group</a>!

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Application and Mobile Security

More events from Mauro Verderosa

Follow organizers to get events picked for you

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.

Application and Mobile Security

More events from Mauro Verderosa

Follow organizers to get events picked for you

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.