OWASP Los Angeles

TOPIC: The End of Mobile Security Complacency: DMA, Antitrust, and the Rise of Real API Protection
Join us for great networking, dinner and drinks, and see a presentation by Ted Miracco, CEO, Approov

ABSTRACT:
The security landscape for mobile applications is being redrawn. The EU’s Digital Markets Act (DMA) and landmark legal decisions against Apple’s app store practices are ushering in a new era of mobile security transparency and accountability. At the same time, reports like Dark Reading’s “Mobile Applications Are a Cesspool of Security Issues” expose the urgent need for serious mobile app and API protection strategies.
This talk uncovers the hidden risks of platform monocultures and challenges Apple and Google’s claim that built-in security is sufficient. It offers a practical roadmap for implementing app attestation, runtime protection, and secure API communication to counteract threats such as API scraping, bot automation, credential abuse, and tampered client applications.
We'll dissect recent changes in regulation and litigation and explain why OWASP professionals must lead the charge in adopting more resilient, open, and developer-driven mobile security practices.
Learning Objectives:

• Understand the regulatory and legal catalysts reshaping mobile app security.
• Learn how API attacks exploit mobile app weaknesses, despite “built-in” platform defenses.
• Evaluate tools and frameworks, including app attestation and RASP, that enable secure API communication.
• Gain insights into how to implement dynamic secrets, certificate pinning, and secure client validation.
• Explore why monopolistic behaviors hinder innovation and what OWASP chapters can do about it.

TOPIC: Hands-on Application Security Workshop with Runtime Security IAST Technology and Secure Code Training
Join us for an action-packed hands-on workshop event led by Will Derksen, Sr. Solutions Engineer, Contrast Security.
Earn 2 hours of CPE credit!*

ABSTRACT:
Together, we will...

• Unify around a precise definition of a vulnerability, as well as understand the challenges current application testing methodologies have in detecting vulnerabilities, and how to change the way we interact with them
• Get hands-on-keyboard experience leveraging Contrast training to find a vulnerability in code, learn how to fix said vulnerability, and proactively go and remediate the vulnerability

Who should attend?

• AppSec professionals
• Security engineers
• Software engineers
• DevOps/DevSecOps professionals
• Anyone wanting to learn more about identifying and fixing code vulnerabilities, discover the most efficient ways to execute on a DevSecOps program, and become proactively more knowledgeable around secure coding techniques.

PLEASE NOTE - for the lab portion of this event, you must bring a laptop (phones or other personal devices will NOT work for the lab).
*This workshop qualifies for 2 hours of hands-on training for Continuing Professional Credits (CPE). For CISSP holders this would be in the Application Security Discipline and you will receive a certificate of completion after the workshop.

TOPIC: TBA

ABSTRACT: TBA

OWASP LA has organized an exceptional offer for our Meetup membership to participate in the 2025 California Technology Summit on October 8th in Anaheim, CA. Join us for a full day of professional development, technical insight, and networking with top minds in IT and cybersecurity.