Schedule

Friday - 19th June

10:30 - 11:00

CISO and Risk Management

watch using

Keynote - Jane Frankland InSecurity

Jane Frankland

13:40 - 14:00

Lightning Talks

watch using

Lightning Talk - DevSecOps

Imran A. Mohammed

11:00 - 13:00

Misc

watch using

Secure it at the source, frameworks and how to get them more secure

Andrew van der Stock

11:00 - 13:00

OWASP ASVS

watch using

OSS user stories for all ASVS requirements that people can download and use

Mario Platt

14:00 - 16:00

Dynamic Sessions

watch using

Post-mortem of the incident exercise

Dinis Cruz , Didar Gelici , Tony Richards , James Bore , Ben Schofield

14:00 - 16:00

OWASP ASVS

watch using

What OWASP tools/projects we already have and what are we missing to deliver secure devops pipelines

Daniel Cuthbert , Andrew van der Stock

17:00 - 19:00

Misc

watch using

Sense making with Cynefin framework

Mario Platt , Phil Huggins

17:00 - 19:00

Covid

watch using

Using OWASP at Covid Safe Paths

Dinis Cruz , Adam Leon Smith

20:00 - 22:00

Social

watch using

Experience LeanInAgile

Leila Rao

20:00 - 22:00

DevSecOps

watch using

Security Automation with Python Boto3 for AWS and Pulumi

Petra Vukmirovic , Tomas Pilvelis

21:45 - 23:00

Social

watch using

9:45 PM - OSS Closing Keynote at a virtual pub setting

Open Security Summit

Monday - 1st June

14:00 - 16:00

Threat Modeling

watch using

Threat Modeling - O365 SaaS Provider

James Bore

17:00 - 19:00

Covid

watch using

Covid Apps Analysis

Mark Carney , Jay Harris

20:00 - 22:00

Threat Modeling

watch using

Drinks and Persona Building: Creating Adversary Trading Cards (1st Session)

Mark Miller

Tuesday - 2nd June

19:00 - 20:00

OWASP Juice Shop

watch using

MultiJuicer Introduction

Jannik Hollenbach , Robert Seedorff

11:00 - 13:00

Cloud Security

watch using

Cloud Security 101

Kriti Mohun

14:00 - 16:00

Cloud Security

watch using

Chef InSpec (Compliance as Code)

Joshua Jebaraj

14:00 - 16:00

Wardley Maps

watch using

Introduction to Wardley Mapping by Goher Mohammad

Goher Mohammad

17:00 - 19:00

OWASP Juice Shop

watch using

OWASP Juice Shop introduction

Bjoern Kimminich

Wednesday - 3rd June

14:00 - 16:00

Wardley Maps

watch using

Wardley Mappping introduction with Cat Swetel

Cat Swetel

17:00 - 19:00

Covid

watch using

Vulnerabilities review of an Covid Application

Mike Minchinton

Thursday - 4th June

11:00 - 13:00

Covid

watch using

Covid Safe Paths - Threat Modeling Part 1

Dinis Cruz , Mark Carney , Jay Harris , Adam Leon Smith

14:00 - 16:00

CISO and Risk Management

watch using

Trusted Partner Network demo

Ben Schofield

17:00 - 19:00

Hacking and Defending

watch using

Threat Modeling - Cloud Functions as Detonation Chambers - Part 1

Dinis Cruz

Friday - 5th June

11:00 - 13:00

Covid

watch using

Covid Safe Paths - Threat Modeling Part 2

Dinis Cruz , Adam Leon Smith

14:00 - 16:00

DevSecOps

watch using

Jira-Jupyter integration introduction

Tatevik Stepanyan

14:00 - 16:00

Wardley Maps

watch using

Wardley Maps First Aid

Petra Vukmirovic

17:00 - 19:00

Hacking and Defending

watch using

Hacking Glasswall SDk & Cloud - Part 2

Dinis Cruz

Monday - 8th June

11:00 - 13:00

Threat Modeling

watch using

Threat Modeling Introduction

Dinis Cruz , Petra Vukmirovic

14:00 - 16:00

DevSecOps

watch using

To DevSecOps or not to DevSecOps: is that a question?

Mario Platt

17:00 - 19:00

Hacking and Defending

watch using

Social Engineering - from recon to execution

Stuart Peck

20:00 - 22:00

Social

watch using

SEMI-SOCIAL: Improv Comedy as a Social Engineering Tool

Dave Mattingly

Tuesday - 9th June

11:00 - 13:00

Wardley Maps

watch using

Introduction to Wardley Mapping by Chris Daniel

Chris Daniel

11:00 - 13:00

DevSecOps

watch using

SAST - Static Analysis integration lab

Mohammed A. Imran

14:00 - 16:00

DevSecOps

watch using

GitHub Actions & code scanning with CodeQL

Sasha Rosenbaum

17:00 - 19:00

Hacking and Defending

watch using

Oh dear, my laptop is hacked!

Petra Vukmirovic , Sara Notaro

17:00 - 19:00

ISG

watch using

What are ISGs and how to convert ISGs into checklists?

Elvin White , Dinis Cruz

Wednesday - 10th June

11:00 - 13:00

DevSecOps

watch using

DAST - Dynamic Analysis integration lab

Mohammed A. Imran

11:00 - 13:00

CISO and Risk Management

watch using

Supply Chain Attacks : The rise of the Third Party Poopers

Demi Ben-Ari , Elad Shapira

14:00 - 16:00

ISG

watch using

How to measure and visualise ISG standards

Elvin White , Vinh Tram , Greg Mann

14:00 - 16:00

DevSecOps

watch using

Owning AppSec Automation with Python

Abhay Bhargav

14:00 - 16:00

Wardley Maps

watch using

Using Wardley mapping for Security Strategy and Architecture development

Mario Platt

17:00 - 19:00

CISO and Risk Management

watch using

Incident Scenario Exercise

Dinis Cruz , James Bore , Didar Gelici , Petra Vukmirovic

Thursday - 11th June

11:00 - 13:00

DevSecOps

watch using

Dependency scanning lab

Mohammed A. Imran

11:00 - 13:00

Threat Modeling

watch using

Introduction to Threat Modeling by Avi Douglen

Avi Douglen

14:00 - 16:00

DevSecOps

watch using

Infrastructure scan & Encryption

Barak Schoster

14:00 - 16:00

Security Standards

watch using

NCSC - Safe File Import Pattern

Paul Burke , Tim Lunn

14:00 - 16:00

ISG

watch using

What security exploits are prevented by implementing ISGs

Elvin White , Greg Mann , Vinh Tram

17:00 - 19:00

Hacking and Defending

watch using

O365 Security - Anti-Phishing best practises and Demo

Abbas Haidar

17:00 - 19:00

ISG

watch using

Office Documents ISG - How to automate Inspection and Sanitization Guidance testing

Greg Mann , Vinh Tram , Elvin White

17:00 - 19:00

OWASP Juice Shop

watch using

OWASP Juice Shop Introduction

Bjoern Kimminich

Friday - 12th June

11:00 - 13:00

DevSecOps

watch using

Secrets and credentials scanning lab

Mohammed A. Imran

11:00 - 13:00

Threat Modeling

watch using

Threat Modeling - ICAP

Dinis Cruz , Paul Gerard

14:00 - 16:00

Wardley Maps

watch using

Wardley Mapping (intermediate)

Tony Richards

17:00 - 19:00

OWASP Projects

watch using

Applying OWASP Web Security Testing Guide (Vandana V)

Vandana Verma

17:00 - 19:00

ISG

watch using

PDF ISG - Inspection and Sanitization Guidance for Portable Document Format and JPG ISG - How to automate Inspection and Sanitization Guidance testing

Vinh Tram , Greg Mann , Elvin White

20:00 - 22:00

Social

SOCIAL - Cards Against Humanity game

Tony Richards

Monday - 15th June

10:30 - 11:00

CISO and Risk Management

watch using

Keynote - Open Security Summit 2020

Open Security Summit

13:40 - 14:00

Lightning Talks

watch using

Lightning Talk - Why your corporate IT needs to look a lot more like consumer IT

James Duncan

11:00 - 13:00

Wardley Maps

watch using

Wardley Maps Introduction by Simon Wardley

Simon Wardley

11:00 - 13:00

CISO and Risk Management

watch using

Threat Personas and Application Vulnerability Scoring Model

Robin Oldham , Phil Huggins

11:00 - 13:00

OWASP Juice Shop

watch using

OWASP Juice Shop Deep Dive - Theming

Bjoern Kimminich

14:00 - 16:00

DevSecOps

watch using

Beating the 1:100 Odds - Team Topologies for Security

Manuel Pais , Mario Platt

14:00 - 16:00

OWASP Juice Shop

watch using

OWASP Juice Shop Deep Dive - Integration

Bjoern Kimminich

14:00 - 16:00

Covid

watch using

Wardley Mapping Covid Safe Paths App

Simon Wardley , Dinis Cruz , Adam Leon Smith

17:00 - 19:00

Wardley Maps

watch using

Strategy Development - applying the concepts (Wardley Maps)

Simon Wardley , Mario Platt

17:00 - 19:00

OWASP Juice Shop

watch using

OWASP Juice Shop Deep Dive - MultiJuicer

Jannik Hollenbach , Robert Seedorff

20:00 - 22:00

Wardley Maps

watch using

Threat Mapping (using Maps in Cyber Security)

Simon Wardley , Petra Vukmirovic , Dinis Cruz

20:00 - 22:00

OWASP Juice Shop

watch using

OWASP Juice Shop Cocktail Party - Ask us anything ( AUA )

Bjoern Kimminich , Jannik Hollenbach , Timo Pagel

Tuesday - 16th June

10:30 - 11:00

Wardley Maps

watch using

Keynote - Wardley Mapping

Simon Wardley

13:00 - 13:30

Threat Modeling

watch using

Lightning Demo - Threatmodel tool demos

Steven Wierckx , Mike Goodwin

13:40 - 14:00

Lightning Talks

watch using

Lightning Talk - The Future of CNI

Dr Jacqui Taylor

19:40 - 20:00

Lightning Talks

watch using

Lightning Talk- Cybersecurity: What history teaches us

Naina Bhattacharya

11:00 - 13:00

Wardley Maps

How do I do it - Bring your own map

Dinis Cruz , Mario Platt , Simon Wardley , Petra Vukmirovic , Tony Richards , Ben Schofield

11:00 - 13:00

Threat Modeling

watch using

Threat model academic research status

Steven Wierckx , Koen Yskout , Kim Wuyts

14:00 - 16:00

Wardley Maps

watch using

Mapping culture

Simon Wardley

17:00 - 19:00

Wardley Maps

watch using

Team Topologies & PST & Squads & Tribes

Simon Wardley , Dinis Cruz , Tony Richards , Luke Robbertse

20:00 - 22:00

DevSecOps

watch using

Agile in Cybersecurity (9pm)

Leila Rao

20:00 - 22:00

DevSecOps

watch using

Making the business case for DevSecOps (8PM)

David Prince , Leila Rao

20:00 - 22:00

Wardley Maps

watch using

Risk Mapping - Applying Risk overlay with maps and security decision making

Alan Jenkins , Avi Douglen , Ben Schofield , Simon Wardley

Wednesday - 17th June

10:30 - 11:00

CISO and Risk Management

watch using

Keynote - Security from the CEO Point of view and Modern Team structures

Danny Lopez

19:40 - 20:00

Lightning Talks

watch using

Lightning Talk - Cybersecurity in M&A (a CISO's guide)

Paul Harragan

11:00 - 13:00

CISO and Risk Management

watch using

CEOs and CISOs roundtable

Danny Lopez , Ante Gulam , Kevin Fielder , Dinis Cruz

11:00 - 13:00

Threat Modeling

watch using

Threatmodel tool demos - Wednesday AM

Steven Wierckx , Fraser Scott , Izar Tarandach

11:00 - 13:00

Content Disarm & Reconstruction

watch using

Securely Handling Fonts in PDFs - Part 1

Elvin White

14:00 - 16:00

CISO and Risk Management

watch using

Who is the CISO? Nobody knows

Alan Jenkins , Dinis Cruz , Phil Huggins , Tony Richards

14:00 - 16:00

Threat Modeling

watch using

Threatmodel tool demos - Wednesday PM

Steven Wierckx , Geoff Hill

17:00 - 19:00

CISO and Risk Management

watch using

Third Party Assurance

Didar Gelici , Alan Jenkins , Tony Richards , Demi Ben-Ari , Elad Shapira

20:00 - 22:00

Social

9 PM - Netflix Party (TBD)

Open Security Summit

Thursday - 18th June

10:30 - 11:00

Covid

watch using

Keynote - Privacy by design at Covid Safe Paths App

Adam Leon Smith

19:40 - 20:00

Lightning Talks

watch using

Lightning Talk - Startups: Security vs speed vs revenue, when all 3 are a priority!

Haydn Brooks

11:00 - 13:00

Cloud Security

watch using

Migration to Cloud

David Prince

11:00 - 13:00

Threat Modeling

watch using

Threatmodel tool demos-Thursday

Steven Wierckx , Stephen De Vries

11:00 - 13:00

Covid

watch using

Security Labels for Covid Apps

Adam Leon Smith , Dinis Cruz

11:00 - 13:00

CISO and Risk Management

NCSC - Exercise in a box

Steve O , Peter G , Joshua H

14:00 - 16:00

Content Disarm & Reconstruction

watch using

CDR Roundtable How to collaborate and increase adoption

Dinis Cruz

14:00 - 16:00

Threat Modeling

watch using

Threatmodel tool demos - Thursday PM

Steven Wierckx , Stuart Winter-Tear , Alex Bauert , Nikunj Nagalia

14:00 - 16:00

Cloud Security

watch using

Multi-cloud Compliance as code

David Prince

14:00 - 16:00

CISO and Risk Management

watch using

Open Information Security Risk Universe (OISRU)

Phil Huggins , Robin Oldham , Petra Vukmirovic

15:00 - 16:00

Cloud Security

watch using

Open control frameworks in Media and Entertainment

Ben Schofield

17:00 - 19:00

Wardley Maps

watch using

Wardley mapping dynamic session

Avi Douglen , Mario PLatt

17:00 - 19:00

Content Disarm & Reconstruction

watch using

Create common sets of files for CDR Testing and QA

Matt Green , Greg Mann

20:00 - 22:00

CISO and Risk Management

watch using

Risk & Error Budgeting

Omer Levi Hevroni , Phil Huggins , Aaron Rinehart

20:00 - 22:00

Covid

watch using

COVID Apps Threat Modeling

Jakub Kaluzny

20:00 - 22:00

Content Disarm & Reconstruction

watch using

Bakeoff - Anti-virus vs CDR vs Sandboxing

Paul Burke