Program

Monday, March 4th
09:00 - 10:30 Secure coding Jim Manico
11:00 - 12:30 Access control Frank Piessens Hands-on mobile apps
Ken van Wyk
01:40 - 03:10 SCADA security Martin Ochoa
03:40 - 05:10 Security APIs Graham Steel Secure Development LifeCycles (SDLC) Bart De Win 
Tuesday, March 5th
09:00 - 10:30 Cryptographic algorithms Bart Preneel Security tools. A hands-on session Ken van Wyk
11:00 - 12:30 Cryptographic security APIs Graham Steel    
01:40 - 03:10 Entity authentication Bart Preneel C-based application exploits and countermeasures Yves Younan
03:40 - 05:10 JavaScript security Tom Van Cutsem  Hands-on security APIs Graham Steel
Wednesday, March 6th
09:00 - 10:30 Entity Authentication and Session Management Jim Manico Hands-on exploiting C-based application vulnerabilities Yves Younan and Pieter Philippaerts
11:00 - 12:30 Public Key Infrastructures fundamentals Bart Preneel
01:40 - 03:10 Recent developments in cryptology Bart Preneel Advanced XSS Defense Jim Manico
03:40 - 05:10 Common IAM architecture flaws and remediation strategies John Steven Privacy Claudia Diaz
Thursday, March 7th
09:00 - 10:30 Security economics and psychology Steven Murdoch Client-side security policies Lieven Desmet
11:00 - 12:30 Network security protocols Bart Preneel Threat modeling John Steven
01:40 - 03:10 Security testing fundamentals Ken van Wyk Secure design John Steven
03:40 - 05:10 Using SSL/TLS Thomas Herlea Sandboxing JavaScript Nick Nikiforakis and Steven Van Acker
Friday, March 8th
09:00 - 10:30 Cryptography best practices Bart Preneel BYOD issues every software developer should know Ken van Wyk
11:00 - 12:30 Anonymity systems and requirements Steven Murdoch Alumni workshop Alexander Helleboogh and Nelis Boucké
01:40 - 03:10 Banking security architecture  Steven Murdoch Authorization with OAuth 2.0 Stijn Van Den Enden and Jan Van den Bergh
03:40 - 05:10 Closing workshop Jim Manico and Johan Peeters

 

Legend
threat modeling
architecture
design
coding
assurance
cryptography
IAM
web applications
mobile applications
business

 

Partners:

Solvay Brussels School of Economics and Management Katholieke Universiteit Leuven

Affiliated organizations:

OWASP NESSoS STREWS
Creative Commons

Contents of the secappdev.org website are licensed under a Creative Commons Attribution-NonCommercial 3.0 License.