Handouts - SecAppDev 2013

Jim Manico

• Secure coding
• Entity Authentication and Session Management
• Advanced XSS Defense

Frank Piessens

• Access control

Stijn Van Den Enden & Jan Van den Bergh

• Authorization with OAuth 2.0
• OAuth 2.0 code samples

Ken van Wyk

• Hands-on mobile apps
• Security tools. A hands-on session
• Security testing fundamentals

Bart De Win

• Secure Development LifeCycles (SDLC)

Bart Preneel

• Cryptographic algorithms
• Entity authentication
• Public Key Infrastructures fundamentals
• Recent developments in cryptology
• Network security protocols
• Cryptography best practices

Graham Steel

• Security APIs
• Cryptographic security APIs

Thomas Herlea

• Using SSL/TLS

John Steven

• Common IAM architecture flaws and remediation strategies
• Threat modeling
• Secure design

Yves Younan

• C-based application exploits and countermeasures

Yves Younan & Pieter Philippaerts

• Hands-on exploiting C-based application vulnerabilities

Tom Van Cutsem

• JavaScript security

Lieven Desmet

• Client-side security policies

Nick Nikiforakis & Steven Van Acker

• Sandboxing JavaScript

Steven Murdoch

• Security economics and psychology
• Anonymity systems and requirements
• Banking security architecture

Alexander Helleboogh & Nelis Boucké

• Alumni workshop

Jim Manico & Johan Peeters

• Closing workshop